SS
Product
Spectrum Scale
59
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 22Medium 30Low 4
Watch
Add Spectrum Scale to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-40607 | 6.8 | Dec 19 | IBM Spectrum Scale directory traversal Affected: 5.1 |
| CVE-2021-29708 | 6.7 | May 25 | IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges Affected: 5.1.0.1 |
| CVE-2022-43869 | 6.5 | Feb 8 | IBM Spectrum Scale denial of service Affected: 5.1.0.0 before 5.1.2.8; 5.1.3.0 before 5.1.5.1 |
| CVE-2020-4348 | 6.5 | May 27 | IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.4 could allow an authenticated GUI user to perform unauthorized actions due to missing function level access… Affected: 4.2.0.0 through 4.2.3.21; 5.0.0.0 through 5.0.4.4 |
| CVE-2018-1782 | 6.5 | Sep 19 | IBM GPFS (IBM Spectrum Scale 5.0.1.0 and 5.0.1.1) allows a local, unprivileged user to cause a kernel panic on a node running GPFS by accessing a file that is stored on a GPFS… Affected: 5.0.1.0; 5.0.1.1 |
| CVE-2015-7456 | 6.5 | Jan 1 | IBM Spectrum Scale 4.1.1 before 4.1.1.4, and 4.2.0.0, allows remote authenticated users to discover object-storage admin passwords via unspecified vectors Affected: 4.1.1.0; 4.1.1.1; 4.1.1.2; 4.2.2.0 |
| CVE-2020-4748 | 6.1 | Oct 20 | IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting Affected: after 5.0.0.0 through 5.0.5.2 |
| CVE-2020-4981 | 6.0 | Apr 27 | IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation Affected: 5.0.4.1 through 5.1.0.3 |
| CVE-2015-7488 | 5.9 | Jan 27 | IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol configurations, allows remote attackers to discover an LDAP password via… Affected: 4.1.1.0; 4.1.1.1; 4.1.1.2; 4.2.0.0 |
| CVE-2023-30434 | 5.5 | May 5 | IBM Storage Scale denial of service Affected: 5.1.0.0 through 5.1.2.9; 5.1.3.0 through 5.1.6.1 |
| CVE-2020-4925 | 5.5 | Mar 1 | A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests Affected: 5.0.0; 5.1.0 |
| CVE-2020-4891 | 5.5 | Mar 16 | IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 uses an inadequate account lockout setting that could allow a local user er to brute force Rest API account… Affected: 5.0.0.0 through 5.0.5.5; 5.1.0.0 through 5.1.0.2 |
| CVE-2020-4851 | 5.5 | Mar 16 | IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and development efforts Affected: 5.0.0.0 before 5.0.5.5; 5.1.0.0 before 5.1.0.2 |
| CVE-2020-4756 | 5.5 | Oct 20 | IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local attacker to invoke a… Affected: after 4.2.0.0 through 4.2.3.23; after 5.0.0.0 through 5.0.5.2 |
| CVE-2020-4491 | 5.5 | Oct 20 | IBM Spectrum Scale V4.2.0.0 through V4.2.3.22 and V5.0.0.0 through V5.0.5 could allow a local attacker to cause a denial of service by sending a large number of RPC requests to… Affected: after 4.2.0.0 through 4.2.3.22; after 5.0.0.0 through 5.0.5 |
| CVE-2020-4492 | 5.5 | Aug 31 | IBM Spectrum Scale V5.0.0.0 through V5.0.4.3 and V4.2.0.0 through V4.2.3.21 could allow a local attacker to cause a denial of service crashing the kernel by sending a subset of… Affected: 4.2.0.0 through 4.2.3.21; 5.0.0.0 through 5.0.4.3 |
| CVE-2019-4259 | 5.5 | May 13 | A security vulnerability has been identified in IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 with CES stack enabled that could allow sensitive data to be… Affected: 4.1.1.0 through 4.1.1.22; 4.2.0.0 through 4.2.3.13; 5.0.0.0 through 5.0.2.3 |
| CVE-2018-1783 | 5.5 | Oct 5 | IBM GPFS (IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2) command line utility allows an unprivileged, authenticated user with access to a GPFS node to… Affected: 4.1.0.0 through 4.1.1.20; 4.2.0.0 through 4.2.3.10; 5.0.0.0 through 5.0.1.2 |
| CVE-2018-1723 | 5.5 | Oct 5 | IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 could allow an unprivileged, authenticated user with access to a GPFS node to read arbitrary files… Affected: 4.1.0.0 through 4.1.1.20; 4.2.0.0 through 4.2.3.10; 5.0.0.0 through 5.0.1.2 |
| CVE-2021-29666 | 5.4 | Apr 27 | IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting Affected: 5.0.0 through 5.0.5.6; 5.1.0 through 5.1.0.2 |
| CVE-2020-4755 | 5.4 | Oct 20 | IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting Affected: after 5.0.0.0 through 5.0.5.2 |
| CVE-2020-4358 | 5.4 | May 27 | IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting Affected: 5.0.0.0 through 5.0.4.4 |
| CVE-2019-4665 | 5.4 | Dec 11 | IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting Affected: 4.2.0.0 through 4.2.3.18; 5.0.0.0 through 5.0.4.0 |
| CVE-2020-4412 | 5.3 | May 19 | The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service security vulnerability Affected: 4.2.0.0 through 4.2.3.21; 5.0.0.0 through 5.0.4.3 |
| CVE-2020-4378 | 4.9 | May 27 | IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a privileged authenticated user to perform unauthorized actions using a specially crated HTTP POST command Affected: 5.0.0.0 through 5.0.4.4 |
| CVE-2021-38882 | 4.4 | Nov 16 | IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records before expiration time Affected: 5.1.0 through 5.1.1.1 |
| CVE-2020-4890 | 4.4 | Mar 16 | IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with a valid role to the REST API to cause a denial of service due to weak or absense… Affected: 5.0.0.0 through 5.0.5.5; 5.1.0.0 through 5.1.0.2 |
| CVE-2020-4749 | 4.3 | Oct 20 | IBM Spectrum Scale 5.0.0 through 5.0.5.2 does not set the secure attribute on authorization tokens or session cookies Affected: after 5.0.0.0 through 5.0.5.2 |
| CVE-2020-4357 | 4.3 | May 27 | IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 5.0.0.0 through 5.0.4.4 |
| CVE-2015-7403 | 4.0 | Jan 2 | IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of… Affected: 4.1.1.0; 4.1.1.1; 4.1.1.2 |
Showing 30