CVE-2015-0198
HighSummary
A vulnerability in IBM General Parallel File System (GPFS) allows remote attackers to bypass authentication and execute arbitrary programs as root in certain cipherList configurations. It affects versions 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7.
Risk Assessment
This vulnerability allows attackers to gain full system privileges, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update IBM GPFS to the latest version to mitigate this vulnerability and review cipherList configurations to enhance security.
Other vulnerabilities in IBM General Parallel File System (GPFS)
See all- CVE-2016-0392High
IBM General Parallel File System (GPFS) in versions 2.0.0 through 2.0.7 and 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, allows local users to gain privileges via a crafted parameter to a setuid program.
- CVE-2015-0197High
IBM General Parallel File System (GPFS) versions 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local users to obtain root privileges for program execution via unspecified vectors.
Original NVD description (English source)
IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cipherList configurations allows remote attackers to bypass authentication and execute arbitrary programs as root via unspecified vectors.