CVE-2015-0197: High severity ibm general parallel file system storage server vulnerability

Published Mar 24, 2015

Updated

IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local users to obtain root privileges for program execution via unspecified vectors.

Affected Software

3 affected components

IBM General Parallel File System=3.4

IBM General Parallel File System=3.5

IBM General Parallel File System=4.1

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=isg3T1022062

Event History

Mar 24, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0197?

CVE-2015-0197 has a high severity rating due to the potential for local users to escalate privileges to root.

How do I fix CVE-2015-0197?

To fix CVE-2015-0197, upgrade to IBM General Parallel File System version 3.4.0.32, 3.5.0.24, or 4.1.0.7 or later.

What impact does CVE-2015-0197 have on systems?

CVE-2015-0197 allows local users to gain root privileges, which can lead to unauthorized access and control over affected systems.

Which versions of IBM General Parallel File System are affected by CVE-2015-0197?

CVE-2015-0197 affects IBM General Parallel File System versions 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7.

Who is at risk for CVE-2015-0197?

Organizations using vulnerable versions of IBM General Parallel File System are at risk if local users can access the systems.