CVE-2015-1890
IBM General Parallel File System 4.1 - Exposure of Sensitive Information via gpfs.snap Archive
Title source: llmDescription
/usr/lpp/mmfs/bin/gpfs.snap in IBM General Parallel File System (GPFS) 4.1 before 4.1.0.7 produces an archive potentially containing cleartext keys, and lacks a warning about reviewing this archive to detect included keys, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/73918
Patch, Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=isg3T1022077
Scores
EPSS
0.0099
EPSS Percentile
58.2%
Details
CWE
CWE-200
Status
published
Products (1)
ibm/general_parallel_file_system
4.1
Published
Apr 06, 2015
Tracked Since
Feb 18, 2026