IBM Spectrum Scale 5.0.5.4

CPE Details

IBM Spectrum Scale 5.0.5.4
ibm
spectrum_scale
5.0.5.4
2021-02-08
13h38 +00:00
2021-06-03
15h06 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ibm:spectrum_scale:5.0.5.4:*:*:*:*:*:*:*

Informations

Vendor

ibm

Product

spectrum_scale

Version

5.0.5.4

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-4927 2023-03-15 18h11 +00:00 A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191695.
8.2
High
CVE-2022-40607 2022-12-19 19h36 +00:00 IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside of the volume, including on the host filesystem. IBM X-Force ID: 235740.
6.8
Medium
CVE-2020-4926 2022-05-24 16h20 +00:00 A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191600.
9.1
Critical
CVE-2021-29740 2021-06-01 14h05 +00:00 IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context of process memory, potentially escalating their system privileges and taking control over the entire system with root access. IBM X-Force ID: 201474.
7.8
High
CVE-2021-29667 2021-04-27 16h32 +00:00 IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 199403.
7.8
High
CVE-2021-29666 2021-04-27 16h32 +00:00 IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199400.
5.4
Medium
CVE-2020-4981 2021-04-27 16h32 +00:00 IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541.
6
Medium
CVE-2020-4891 2021-03-16 13h55 +00:00 IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 uses an inadequate account lockout setting that could allow a local user er to brute force Rest API account credentials. IBM X-Force ID: 190974.
5.5
Medium
CVE-2020-4890 2021-03-16 13h55 +00:00 IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with a valid role to the REST API to cause a denial of service due to weak or absense of rate limiting. IBM X-Force ID: 190973.
4.4
Medium
CVE-2020-4851 2021-03-16 13h55 +00:00 IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190450.
5.5
Medium
CVE-2020-4889 2021-01-26 14h25 +00:00 IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190971.
3.3
Low