CVE-2016-0361
First published: Mon Aug 08 2016(Updated: )
IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMIN passwords.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM General Parallel File System | =3.5 | |
| IBM General Parallel File System | =3.5.0.3 | |
| IBM General Parallel File System | =3.5.0.7 | |
| IBM General Parallel File System | =3.5.0.9 | |
| IBM General Parallel File System | =3.5.0.11 | |
| IBM General Parallel File System | =3.5.0.16 | |
| IBM General Parallel File System | =4.1.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-0361?
CVE-2016-0361 is classified as a moderate severity vulnerability that allows remote authenticated users to access sensitive information.
How do I fix CVE-2016-0361?
To fix CVE-2016-0361, update IBM General Parallel File System to version 3.5.0.29 efix 6 or 4.1.1.4 efix 9.
What systems are affected by CVE-2016-0361?
CVE-2016-0361 affects IBM General Parallel File System versions 3.5 and 4.1.1 prior to the specified efix versions.
What type of information can be exposed by CVE-2016-0361?
CVE-2016-0361 can potentially expose sensitive information related to administrative accounts.
Who is impacted by CVE-2016-0361?
Remote authenticated users on systems using affected versions of IBM General Parallel File System may be impacted by CVE-2016-0361.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/author
- agent/references
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- vendor/ibm
- canonical/ibm general parallel file system
- version/ibm general parallel file system/3.5
- version/ibm general parallel file system/3.5.0.3
- version/ibm general parallel file system/3.5.0.7
- version/ibm general parallel file system/3.5.0.9
- version/ibm general parallel file system/3.5.0.11
- version/ibm general parallel file system/3.5.0.16
- version/ibm general parallel file system/4.1.0.1