Priority MEDIUM 50
IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cipherList configurations allows remote attackers to bypass authentication and execute arbitrary program…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04156 · Published 2015-03-24 · No fix listed CWE-287
Priority LOW 38
IBM General Parallel File System is vulnerable to a buffer overflow.
CVSS 3.0HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03954 · Published 2017-02-01 · No fix listed CWE-119
Priority LOW 34
A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Sc…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00368 · Published 2018-06-13 · No fix listed
Priority LOW 32
IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sen…
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01815 · Published 2016-08-08 · No fix listed
Priority LOW 32
IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for command execution via unspecified vectors.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00585 · Published 2015-10-26 · No fix listed CWE-77
Priority LOW 32
IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local users to obtain root privileges for program execution via unspecified vectors.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00454 · Published 2015-03-24 · No fix listed CWE-264
Priority LOW 31
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment varia…
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00296 · Published 2016-11-25 · No fix listed CWE-264
Priority LOW 31
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line para…
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00296 · Published 2016-11-25 · No fix listed CWE-264
Priority LOW 23
The mmfslinux kernel module in IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local users to cause a denial of service (memory corruption) via unspecified…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00388 · Published 2015-03-24 · No fix listed CWE-399
Priority LOW 21
IBM General Parallel File System (GPFS) 3.4 through 3.4.0.27 and 3.5 through 3.5.0.16 allows attackers to cause a denial of service (daemon crash) via crafted arguments to a setuid program.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01187 · Published 2014-02-04 · No fix listed CWE-20
Priority LOW 19
IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files.
CVSS 3.0MEDIUM 4.0· Local · No auth · No interaction · EPSS 0.00376 · Published 2018-03-02 · No fix listed CWE-200
Priority LOW 19
IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of service (incorrect pointer dereference and n…
CVSS 3.0MEDIUM 4.0· Local · No auth · No interaction · EPSS 0.00362 · Published 2016-01-02 · No fix listed
Priority LOW 19
/usr/lpp/mmfs/bin/gpfs.snap in IBM General Parallel File System (GPFS) 4.1 before 4.1.0.7 produces an archive potentially containing cleartext keys, and lacks a warning about reviewing this archive to detect included key…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.00969 · Published 2015-04-06 · No fix listed CWE-200
Priority LOW 11
IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain sensitive information from system memory via unspecified vector…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00382 · Published 2015-10-26 · No fix listed CWE-200