high7.0
CVE-2016-2985
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow…
Impact
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment variables to a /usr/lpp/mmfs/bin/ setuid program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Spectrum Scale | Versions 4.1.1.0, 4.1.1.1, 4.1.1.2, 4.1.1.3, 4.1.1.4, 4.1.1.5 |
| Ibm | General Parallel File System | Versions 3.5.0.0, 3.5.0.1, 3.5.0.2, 3.5.0.3, 3.5.0.4, 3.5.0.5 |