CVE-2016-0361

IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMIN passwords.

CVSS v3 6.5 MEDIUM
CVSS v2.0 4.0 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21986595	Patch Vendor Advisory
http://www.securityfocus.com/bid/90550
http://www.securitytracker.com/id/1036455

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:general_parallel_file_system:3.5:::::::*
	cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.3:::::::*
	cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.7:::::::*
	cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.9:::::::*
	cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.11:::::::*
	cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.16:::::::*
	cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.1:::::::*

History

No history.

Information

Published : 2016-08-08 01:59

Updated : 2024-02-04 18:53

NVD link : CVE-2016-0361

Mitre link : CVE-2016-0361

CVE.ORG link : CVE-2016-0361

JSON object : View

Products Affected

ibm

general_parallel_file_system

CWE

NVD-CWE-noinfo

{"id": "CVE-2016-0361", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2016-08-08T01:59:03.837", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21986595", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www.securityfocus.com/bid/90550", "source": "psirt@us.ibm.com"}, {"url": "http://www.securitytracker.com/id/1036455", "source": "psirt@us.ibm.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMIN passwords."}, {"lang": "es", "value": "IBM General Parallel File System (GPFS) 3.5 en versiones anteriores a 3.5.0.29 efix 6 y 4.1.1 en versiones anteriores a 4.1.1.4 efix 9, cuando se utiliza Spectrum Scale GUI con DB2 en Linux, UNIX y Windows, permite a usuarios remotos autenticados obtener informaci\u00f3n sensible a trav\u00e9s de vectores no especificados, como se demuestra descubriendo contrase\u00f1as ADMIN."}], "lastModified": "2017-09-01T01:29:02.053", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F13ADEA-CFB7-4302-B7F2-74EF70F08FC9"}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D08020F-C3F5-4175-B671-73AA12E8F571"}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F32AE31-9C7C-4FFC-A4FB-9C6D13D02E36"}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8638C2C-434E-4716-BB4F-F759FFFAD008"}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3061EBC4-981B-4C1E-B4B6-05CE75AC835C"}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:3.5.0.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BE5DA93-B2EB-438C-B698-75E5F116C02C"}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDD19B4F-5738-4CB1-99FC-F40FDA8388AE"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}