CVE-2018-1431

CVSS 7.4 HIGHEPSS 0.4%

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.4EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

13 Jun 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node. IBM X-Force ID: 139240.

CVSS:3.0/A:H/AC:H/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O

Affected products

IBM · Spectrum Scale

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/139240 http://www.ibm.com/support/docview.wss?uid=ssg1S1012049 http://www.securityfocus.com/bid/105546