CVEvulnerability

CVE-2018-1431

7.8 HIGH Published 2018-06-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-06-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.4 HIGH — CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node. IBM X-Force ID: 139240.

Affected configurations

• ibm general parallel file system (>= 4.1.0.0 <= 4.1.0.8) • ibm spectrum scale (>= 4.1.1.0 <= 4.1.1.19) • ibm spectrum scale (>= 4.2.0.0 <= 4.2.0.4) • ibm spectrum scale (>= 4.2.1.0 <= 4.2.1.2) • ibm spectrum scale (>= 4.2.2.0 <= 4.2.2.3) • ibm spectrum scale (>= 4.2.3.0 <= 4.2.3.8) • ibm spectrum scale (>= 5.0.0.0 <= 5.0.0.2)

References