First published: Tue Mar 24 2015(Updated: )
IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local users to obtain root privileges for program execution via unspecified vectors.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM General Parallel File System | =3.4 | |
IBM General Parallel File System | =3.5 | |
IBM General Parallel File System | =4.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0197 has a high severity rating due to the potential for local users to escalate privileges to root.
To fix CVE-2015-0197, upgrade to IBM General Parallel File System version 3.4.0.32, 3.5.0.24, or 4.1.0.7 or later.
CVE-2015-0197 allows local users to gain root privileges, which can lead to unauthorized access and control over affected systems.
CVE-2015-0197 affects IBM General Parallel File System versions 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7.
Organizations using vulnerable versions of IBM General Parallel File System are at risk if local users can access the systems.