Denial of Service Vulnerability in IBM Spectrum Scale by IBM
CVE-2020-4925

6.2MEDIUM

Key Information:

Vendor
IBM
Status
Spectrum Scale
Vendor
CVE Published:
1 March 2022

Summary

A security flaw in IBM Spectrum Scale versions 5.0 and 5.1 permits a non-root user to exploit the mmfsd daemon by overwhelming it with excessive requests. This can lead to service disruption, rendering the daemon unable to process legitimate requests. Administrators should ensure they are aware of this vulnerability to prevent potential service outages.

Affected Version(s)

Spectrum Scale 5.0

Spectrum Scale 5.1

References

https://www.ibm.com/support/pages/node/6560094
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/191599
vdb-entryx_refsource_XF

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.