CVE-2015-0198

IBM General Parallel File System 3.4-3.4.0.32, 3.5-3.5.0.24, 4.1-4.1.0.7 - Unauthenticated Remote Code Execution

Title source: llm
STIX 2.1

Description

IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cipherList configurations allows remote attackers to bypass authentication and execute arbitrary programs as root via unspecified vectors.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/73278
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032880
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=isg3T1022062

Scores

EPSS 0.0419
EPSS Percentile 89.7%

Details

CWE
CWE-287
Status published
Products (3)
ibm/general_parallel_file_system 3.4
ibm/general_parallel_file_system 3.5
ibm/general_parallel_file_system 4.1
Published Mar 24, 2015
Tracked Since Feb 18, 2026