NetSight
IP …
medium4.0

CVE-2017-1654

IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files.

Impact

IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. IBM X-Force ID: 133378.

Affected products

VendorProductAffected versions
IbmSpectrum Scale
from 4.1.1.0 through 4.1.1.18
from 4.2.0.0 through 4.2.0.4
from 4.2.1.0 through 4.2.1.2
from 4.2.2.0 through 4.2.2.3
from 4.2.3.0 through 4.2.3.6
Version 5.0.0.0
IbmGeneral Parallel File System
Versions 4.1.0.0, 4.1.0.1, 4.1.0.2, 4.1.0.3, 4.1.0.4, 4.1.0.5

Weakness classification

CWE-200

References