CVE-2019-4558: High severity ibm spectrum scale vulnerability
A security vulnerability has been identified in all levels of IBM Spectrum Scale (GPFS) that could allow a local attacker to obtain root privilege by injecting parameters into setuid files.
Other sources
A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spectrum Scale V4.2.0.0 through V4.2.3.17 that could allow a local attacker to obtain root privilege by injecting parameters into setuid files.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-4558?
CVE-2019-4558 is a security vulnerability identified in all levels of IBM Spectrum Scale (GPFS) that could allow a local attacker to obtain root privilege by injecting parameters into setuid files.
Which versions of IBM Spectrum Scale are affected by CVE-2019-4558?
CVE-2019-4558 affects IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spectrum Scale V4.2.0.0 through V4.2.3.17.
What is the severity of CVE-2019-4558?
CVE-2019-4558 has a severity value of 8.1, which is considered high.
How can a local attacker exploit CVE-2019-4558?
A local attacker can exploit CVE-2019-4558 by injecting parameters into setuid files to obtain root privilege.
How can I fix CVE-2019-4558 in IBM Spectrum Scale?
To fix CVE-2019-4558 in IBM Spectrum Scale, it is recommended to update to a version that is not affected by the vulnerability. Refer to the IBM support page for more details.