NetSight
IP …
high8.4

CVE-2016-0392

IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x be…

Impact

IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program.

Affected products

VendorProductAffected versions
IbmElastic Storage Server
Versions 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5
IbmGeneral Parallel File System Storage Server
Versions 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5

Weakness classification

CWE-284

References