Unscored severity · published Oct 26, 2015
CVE-2015-4974
IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for…
–
CVSS
0.6%
EPSS
No
On KEV
Description
IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for command execution via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GP
General Parallel File System · Ibm
3.5; 3.5.0.0; 3.5.0.2; 3.5.0.3; 3.5.0.4; 3.5.0.6; +20 more · source: NVD
SS
Spectrum Scale · Ibm
4.1.1.0; 4.1.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-4974
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-4974
Patch
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005366
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg21972152
www.securityfocus.com
http://www.securityfocus.com/bid/77025
www.securitytracker.com
http://www.securitytracker.com/id/1035094
More from General Parallel File System
7.8
CVE-2018-1431
A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to…
7.2
CVE-2016-6115
IBM General Parallel File System is vulnerable to a buffer overflow
7.0
CVE-2016-2985
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain…
7.0
CVE-2016-2984
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain…
6.5
CVE-2016-0361
IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows…