CVE-2018-1431

A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node. IBM X-Force ID: 139240.

CVSS v3 7.4 HIGH
CVSS v2.0 4.6 MEDIUM

7.4^/10

CVSS v3 : HIGH

V3 Legend

Vector : AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 1.4 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.6^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.ibm.com/support/docview.wss?uid=ssg1S1012049	Vendor Advisory
http://www.securityfocus.com/bid/105546	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/139240	VDB Entry Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ssg1S1012049	Vendor Advisory
http://www.securityfocus.com/bid/105546	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/139240	VDB Entry Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:general_parallel_file_system::::::::
	cpe:2.3:a:ibm:spectrum_scale::::::::
	cpe:2.3:a:ibm:spectrum_scale::::::::
	cpe:2.3:a:ibm:spectrum_scale::::::::
	cpe:2.3:a:ibm:spectrum_scale::::::::
	cpe:2.3:a:ibm:spectrum_scale::::::::
	cpe:2.3:a:ibm:spectrum_scale::::::::

History

21 Nov 2024, 03:59

Type	Values Removed	Values Added
References	~~() http://www.ibm.com/support/docview.wss?uid=ssg1S1012049 - Vendor Advisory~~	() http://www.ibm.com/support/docview.wss?uid=ssg1S1012049 - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/105546 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/105546 - Third Party Advisory, VDB Entry
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/139240 - VDB Entry, Vendor Advisory~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/139240 - VDB Entry, Vendor Advisory
CVSS	v2 : ~~4.6~~ v3 : ~~7.8~~	v2 : 4.6 v3 : 7.4

Information

Published : 2018-06-13 14:29

Updated : 2024-11-21 03:59

NVD link : CVE-2018-1431

Mitre link : CVE-2018-1431

CVE.ORG link : CVE-2018-1431

JSON object : View

Products Affected

ibm

general_parallel_file_system
spectrum_scale

CWE

NVD-CWE-noinfo

{"id": "CVE-2018-1431", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.4}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2018-06-13T14:29:00.430", "references": [{"url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1012049", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www.securityfocus.com/bid/105546", "tags": ["Third Party Advisory", "VDB Entry"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/139240", "tags": ["VDB Entry", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1012049", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/105546", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/139240", "tags": ["VDB Entry", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node. IBM X-Force ID: 139240."}, {"lang": "es", "value": "Una vulnerabilidad en GSKit afecta a IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3 y 5.0.0 y podr\u00eda permitir que un atacante local obtenga el control del demonio Spectrum Scale, acceda y modifique archivos en el sistema de archivos de Spectrum Scale y, posiblemente, obtenga privilegios de administrador en el nodo. IBM X-Force ID: 139240."}], "lastModified": "2024-11-21T03:59:48.453", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C32D85DB-9354-491F-8D25-5D142E6C3EAF", "versionEndIncluding": "4.1.0.8", "versionStartIncluding": "4.1.0.0"}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70A040E8-E448-4C24-A3CE-D9EEB520CF46", "versionEndIncluding": "4.1.1.19", "versionStartIncluding": "4.1.1.0"}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D23238D-249E-4DE9-9AD1-561EFB0B8518", "versionEndIncluding": "4.2.0.4", "versionStartIncluding": "4.2.0.0"}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "208F0B90-ABE8-40DA-8344-39C7815B3116", "versionEndIncluding": "4.2.1.2", "versionStartIncluding": "4.2.1.0"}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D93CD87-07E5-4020-9383-CFE6219BD243", "versionEndIncluding": "4.2.2.3", "versionStartIncluding": "4.2.2.0"}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE750276-0258-460A-8689-DCCE6BC56A3C", "versionEndIncluding": "4.2.3.8", "versionStartIncluding": "4.2.3.0"}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F67A879-9876-4F12-99CC-0F862168F2A7", "versionEndIncluding": "5.0.0.2", "versionStartIncluding": "5.0.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}

7.4 /10