Auth bypass in IBM General Parallel File System
CVE-2015-0198
IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cipherList configurations allows remote attackers to bypass authentication and execute arbitrary programs as root via unspecified vectors.
Vulnerability class: Broken Authentication
EPSS: 0.042 (90.4th percentile) — read the EPSS interpretation.
Affected products
- Ibm General_parallel_file_system — versions 3.4, 3.5, 4.1
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vdb-entry, x_refsource_BID)
- psirt@us.ibm.com (vdb-entry, x_refsource_SECTRACK)
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (x_refsource_CONFIRM)