Unscored severity · published Mar 24, 2015
CVE-2015-0198
IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cipherList configurations allows remote attackers to bypass…
–
CVSS
4.2%
EPSS
No
On KEV
Description
IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cipherList configurations allows remote attackers to bypass authentication and execute arbitrary programs as root via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GP
General Parallel File System · Ibm
3.4; 3.5; 4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-0198
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-0198
Patch
http://www-01.ibm.com/support/docview.wss?uid=isg3T1022062
www-304.ibm.com
http://www-304.ibm.com/support/docview.wss?uid=swg21902662
www.securityfocus.com
http://www.securityfocus.com/bid/73278
www.securitytracker.com
http://www.securitytracker.com/id/1032880
More from General Parallel File System
7.8
CVE-2018-1431
A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to…
7.2
CVE-2016-6115
IBM General Parallel File System is vulnerable to a buffer overflow
7.0
CVE-2016-2985
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain…
7.0
CVE-2016-2984
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain…
6.5
CVE-2016-0361
IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows…