IBM Security Bulletin: The Elastic Storage Server are affected by a vulnerability in IBM Spectrum Scale (CVE-2018-1512)

Jul 19, 2018 9:01 am EDT

Categorized: Medium Severity

Share this post:

The Elastic Storage Server are affected by a vulnerability in IBM Spectrum Scale with CES stack enabled that could allow sensitive data to be included with service snaps. This data could be sent to IBM during service engagements (CVE-2018-1512)

CVE(s): CVE-2018-1512

Affected product(s) and affected version(s):

The Elastic Storage Server 5.3 thru 5.3.0.1
The Elastic Storage Server 5.0.0 thru 5.2.2
The Elastic Storage Server 4.5.0 thru 4.6.0
The Elastic Storage Server 4.0.0 thru 4.0.6

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=ibm10716085
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141496

from IBM Product Security Incident Response Team https://ift.tt/2uzTKVT