Design/Logic Flaw

2016-11-2503:59:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment variables to a /usr/lpp/mmfs/bin/ setuid program.

CPENameOperatorVersion
general_parallel_file_systemeq4.1.0.3
general_parallel_file_systemeq3.5.0.21
general_parallel_file_systemeq3.5.0.4
general_parallel_file_systemeq3.5.0.7
general_parallel_file_systemeq3.5.0.12
general_parallel_file_systemeq3.5.0.11
general_parallel_file_systemeq3.5.0.15
general_parallel_file_systemeq3.5.0.20
general_parallel_file_systemeq4.1.0.7
general_parallel_file_systemeq3.5.0.10

Name	Operator	Version
general_parallel_file_system	eq	4.1.0.3
general_parallel_file_system	eq	3.5.0.21
general_parallel_file_system	eq	3.5.0.4
general_parallel_file_system	eq	3.5.0.7
general_parallel_file_system	eq	3.5.0.12
general_parallel_file_system	eq	3.5.0.11
general_parallel_file_system	eq	3.5.0.15
general_parallel_file_system	eq	3.5.0.20
general_parallel_file_system	eq	4.1.0.7
general_parallel_file_system	eq	3.5.0.10