CVE-2021-29667: High severity ibm spectrum scale vulnerability

Q: What is CVE-2021-29667?

CVE-2021-29667 is a vulnerability in IBM Spectrum Scale which allows a remote attacker to execute arbitrary commands on the system.

Q: How severe is CVE-2021-29667?

CVE-2021-29667 has a severity score of 7.8 out of 10.

Q: How does CVE-2021-29667 affect IBM Spectrum Scale?

CVE-2021-29667 affects IBM Spectrum Scale versions 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2.

Q: How can a remote attacker exploit CVE-2021-29667?

A remote attacker can exploit CVE-2021-29667 by manipulating CSV files to execute arbitrary commands on the system.

Q: Is Linux Linux kernel affected by CVE-2021-29667?

No, Linux Linux kernel is not affected by CVE-2021-29667.

Published Apr 20, 2021

Updated

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 199403.

Other sources

IBM Spectrum Scale is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents.

Affected Software

5 affected components

IBM Spectrum Scale<=5.0.0 - 5.0.5.6

IBM Spectrum Scale<=5.1.0 - 5.1.0.2

IBM Spectrum Scale>=5.0.0<=5.0.5.6

IBM Spectrum Scale>=5.1.0<=5.1.0.2

Linux Linux kernel

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6447107

Event History

Apr 20, 2021

CVE Published

via IBM·12:00 AM

Apr 27, 2021

CVE Published

via MITRE·04:32 PM

Data Sourced

via MITRE·04:32 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6447107

Frequently Asked Questions

What is CVE-2021-29667?

CVE-2021-29667 is a vulnerability in IBM Spectrum Scale which allows a remote attacker to execute arbitrary commands on the system.

How severe is CVE-2021-29667?