CVE-2015-0198

2015-03-2402:01:40

CWE-287

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.006

Percentile

79.2%

JSON

IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cipherList configurations allows remote attackers to bypass authentication and execute arbitrary programs as root via unspecified vectors.

Affected configurations

Nvd

Node

ibmgeneral_parallel_file_systemMatch3.4

ibmgeneral_parallel_file_systemMatch3.5

ibmgeneral_parallel_file_systemMatch4.1

VendorProductVersionCPE
ibmgeneral_parallel_file_system3.4cpe:2.3:a:ibm:general_parallel_file_system:3.4:*:*:*:*:*:*:*
ibmgeneral_parallel_file_system3.5cpe:2.3:a:ibm:general_parallel_file_system:3.5:*:*:*:*:*:*:*
ibmgeneral_parallel_file_system4.1cpe:2.3:a:ibm:general_parallel_file_system:4.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	general_parallel_file_system	3.4	cpe:2.3:a:ibm:general_parallel_file_system:3.4:::::::*
ibm	general_parallel_file_system	3.5	cpe:2.3:a:ibm:general_parallel_file_system:3.5:::::::*
ibm	general_parallel_file_system	4.1	cpe:2.3:a:ibm:general_parallel_file_system:4.1:::::::*