CVEvulnerability

CVE-2021-29740

7.8 HIGH Published 2021-06-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-06-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
8.4 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-134

Description

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context of process memory, potentially escalating their system privileges and taking control over the entire system with root access. IBM X-Force ID: 201474.

Affected configurations

• ibm spectrum scale (>= 5.0.0.0 < 5.0.5.7) • ibm spectrum scale (>= 5.1.0 < 5.1.1.0)

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References