CVE-2018-1724

Опубликовано: 11 окт. 2018

Источник: nvd

CVSS3: 5.9

CVSS3: 5.3

CVSS2: 4.6

EPSS Низкий

Описание

IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file permission settings. IBM X-Force ID: 147439.

Ссылки

http://www.securityfocus.com/bid/106642
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/147439
VDB Entry
Vendor Advisory
https://www-01.ibm.com/support/docview.wss?uid=ibm10734767
Mitigation
Patch
Vendor Advisory
http://www.securityfocus.com/bid/106642
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/147439
VDB Entry
Vendor Advisory
https://www-01.ibm.com/support/docview.wss?uid=ibm10734767
Mitigation
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:spectrum_lsf:9.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_lsf:9.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_lsf:9.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_lsf:10.1:*:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00055

Низкий

5.9 Medium

CVSS3

5.3 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-732

Связанные уязвимости

GHSA-3fq4-h97c-g9vv

CVSS3: 5.3

github

больше 3 лет назад

IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file permission settings. IBM X-Force ID: 147439.

EPSS

Процентиль: 17%

0.00055

Низкий

5.9 Medium

CVSS3

5.3 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-732