SS
Product
Spectrum Scale
60
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 23Medium 30Low 4
Watch
Add Spectrum Scale to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-4890 | 4.4 | Mar 16 | IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with a valid role to the REST API to cause a denial of service due to weak or absense… Affected: 5.0.0.0 through 5.0.5.5; 5.1.0.0 through 5.1.0.2 |
| CVE-2020-4749 | 4.3 | Oct 20 | IBM Spectrum Scale 5.0.0 through 5.0.5.2 does not set the secure attribute on authorization tokens or session cookies Affected: after 5.0.0.0 through 5.0.5.2 |
| CVE-2020-4357 | 4.3 | May 27 | IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 5.0.0.0 through 5.0.4.4 |
| CVE-2015-7403 | 4.0 | Jan 2 | IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of… Affected: 4.1.1.0; 4.1.1.1; 4.1.1.2 |
| CVE-2021-29671 | 3.3 | Apr 9 | IBM Spectrum Scale 5.1.0.1 could allow a local attacker to bypass the filesystem audit logging mechanism when file audit logging is enabled Affected: 5.1.0.1 |
| CVE-2020-4889 | 3.3 | Jan 26 | IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development efforts Affected: 5.0.0 through 5.0.5.4; 5.1.0 |
| CVE-2018-1993 | 3.3 | Jan 8 | IBM Spectrum Scale (GPFS) 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache (LROC) is enabled may caused read operation on a file to return data… Affected: 4.1.1.0 through 4.1.1.21; 4.2.0.0 through 4.2.3.11; 5.0.0.0 through 5.0.2.0 |
| CVE-2017-1654 | 3.3 | Mar 2 | IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files Affected: 4.1.1.0 through 4.1.1.18; 4.2.0.0 through 4.2.0.4; 4.2.1.0 through 4.2.1.2; 4.2.2.0 through 4.2.2.3; 4.2.3.0 through 4.2.3.6; 5.0.0.0 |
| CVE-2015-4981 | – | Oct 26 | IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain sensitive information… Affected: 4.1.1.0; 4.1.1.1 |
| CVE-2015-4974 | – | Oct 26 | IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for… Affected: 4.1.1.0; 4.1.1.1 |