IBM GPFS (IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2) command line utility allows an unprivileged, authentic

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• ibm spectrum scale4.1.0.0 and later · up to 4.1.1.20 inclusive
• ibm spectrum scale4.2.0.0 and later · up to 4.2.3.10 inclusive
• ibm spectrum scale5.0.0.0 and later · up to 5.0.1.2 inclusive

Other highest-scoring records for the same primary product.

• CVE-2019-4715IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system.
  36Monitor
• CVE-2020-4927IBM Spectrum Scale information disclosure
  32Monitor
• CVE-2021-29740IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerabili
  31Monitor
• CVE-2021-29667IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection.
  31Monitor
• CVE-2020-4273IBM Spectrum Scale 4.2 and 5.0 could allow a local unprivileged attacker with intimate knowledge of the enviornment to execute commands as r
  31Monitor
• CVE-2019-4558A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spectrum Scale V4.2.0.0 t
  31Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.