CVEvulnerability
CVE-2015-0198
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-03-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cipherList configurations allows remote attackers to bypass authentication and execute arbitrary programs as root via unspecified vectors.
Affected configurations
• ibm general parallel file system 3.4
• ibm general parallel file system 3.5
• ibm general parallel file system 4.1
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=isg3T1022062 Patch, Vendor Advisory
- http://www-304.ibm.com/support/docview.wss?uid=swg21902662 www-304.ibm.com
- http://www.securityfocus.com/bid/73278 www.securityfocus.com
- http://www.securitytracker.com/id/1032880 www.securitytracker.com
- http://www-01.ibm.com/support/docview.wss?uid=isg3T1022062 Patch, Vendor Advisory
- http://www-304.ibm.com/support/docview.wss?uid=swg21902662 www-304.ibm.com
- http://www.securityfocus.com/bid/73278 www.securityfocus.com
- http://www.securitytracker.com/id/1032880 www.securitytracker.com