Auth bypass in Ibm General_parallel_file_system
CVE-2015-0198
IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cipherList configurations allows remote attackers to bypass authentication and execute arbitrary programs as root via unspe…
Vulnerability class: Broken Authentication
EPSS: 0.042 (89.8th percentile) — read the EPSS interpretation.
Affected products
- Ibm General_parallel_file_system — versions 3.4, 3.5, 4.1
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vdb-entry, x_refsource_BID)
- psirt@us.ibm.com (vdb-entry, x_refsource_SECTRACK)
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (x_refsource_CONFIRM)