NetSight
high7.0

CVE-2016-2984

IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow…

Impact

IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line parameters to a /usr/lpp/mmfs/bin/ setuid program.

Affected products

VendorProductAffected versions
IbmSpectrum Scale
Versions 4.1.1.0, 4.1.1.1, 4.1.1.2, 4.1.1.3, 4.1.1.4, 4.1.1.5
IbmGeneral Parallel File System
Versions 3.5.0.0, 3.5.0.1, 3.5.0.2, 3.5.0.3, 3.5.0.4, 3.5.0.5

Weakness classification

References