IBM Security Bulletin: The Elastic Storage Server and the GPFS Storage Server are affected by a vulnerability in IBM Spectrum Scale

Jul 6, 2018 9:00 am EDT

Categorized: High Severity

Share this post:

The Elastic Storage Server and the GPFS Storage Server are affected by a multiple GSKit vulnerability in IBM Spectrum Scale.

CVE(s): CVE-2018-1431, CVE-2018-1447, CVE-2017-3732, CVE-2016-0705

Affected product(s) and affected version(s):

The Elastic Storage Server 5.0.0 thru 5.3.0.1
The Elastic Storage Server 5.0.0 thru 5.2.2
The Elastic Storage Server 4.5.0 thru 4.6.0
The Elastic Storage Server 4.0.0 thru 4.0.6
The Elastic Storage Server 3.5.0 thru 3.5.6
The Elastic Storage Server 3.0.0 thru 3.0.5
The Elastic Storage Server 2.5.0 thru 2.5.5
The GPFS Storage Server 2.0.0 thru 2.0.7

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10716005
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/139240
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/139972
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/121313
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/111140

from IBM Product Security Incident Response Team https://ift.tt/2NpPyQp