Description
IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMIN passwords.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1036455
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21986595
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/90550
Scores
CVSS v3
6.5
EPSS
0.0181
EPSS Percentile
76.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
Status
published
Products (7)
ibm/general_parallel_file_system
3.5
ibm/general_parallel_file_system
3.5.0.3
ibm/general_parallel_file_system
3.5.0.7
ibm/general_parallel_file_system
3.5.0.9
ibm/general_parallel_file_system
3.5.0.11
ibm/general_parallel_file_system
3.5.0.16
ibm/general_parallel_file_system
4.1.0.1
Published
Aug 08, 2016
Tracked Since
Feb 18, 2026