Vulnerabilities > IBM > General Parallel File System > 4.1.0.5

DATE CVE VULNERABILITY TITLE RISK
2018-06-13 CVE-2018-1431 Unspecified vulnerability in IBM General Parallel File System and Spectrum Scale
A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node.
local
low complexity
ibm
4.6
2018-03-02 CVE-2017-1654 Information Exposure vulnerability in IBM General Parallel File System and Spectrum Scale
IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files.
local
low complexity
ibm CWE-200
2.1
2017-02-01 CVE-2016-6115 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in IBM General Parallel File System and Spectrum Scale
IBM General Parallel File System is vulnerable to a buffer overflow.
network
low complexity
ibm CWE-119
critical
9.0
2016-11-25 CVE-2016-2985 Permissions, Privileges, and Access Controls vulnerability in IBM General Parallel File System and Spectrum Scale
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment variables to a /usr/lpp/mmfs/bin/ setuid program.
local
ibm CWE-264
6.9
2016-11-25 CVE-2016-2984 Permissions, Privileges, and Access Controls vulnerability in IBM General Parallel File System and Spectrum Scale
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line parameters to a /usr/lpp/mmfs/bin/ setuid program.
local
ibm CWE-264
6.9