Vulnerability Bulletins |
IBM Security Bulletin: The GPFS pattern provided with IBM PureApplication System is affected by a security vulnerability. (CVE-2015-7456) |
|
| Affected software | IBM |
|
A security vulnerability has been identified in the current levels of IBM Spectrum Scale V4.1.1 thru 4.1.1.3 and V4.2.0.0 that could allow a local unprivileged user, or a user with network access to the IBM Spectrum Scale cluster, to access admin passwords for object storage infrastructure. This vulnerability only affects clusters which have installed and deployed the Object protocol. IBM PureApplication System provides a GPFS pattern and addressed the applicable CVE.CVE(s): More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_the_gpfs_pattern_provided_with_ibm_pureapplication_system_is_affected_by_a_security_vulnerability_cve_2015_7456?lang=en_us |
|