IBM Spectrum Scale CVE-2017-1654 Local Information Disclosure Vulnerability

Bugtraq ID:	104549
Class:	Design Error
CVE:	CVE-2017-1654
Remote:	No
Local:	Yes
Published:	Apr 11 2018 12:00AM
Updated:	Apr 11 2018 12:00AM
Credit:	IBM
Vulnerable:	IBM Spectrum Scale 5.0 IBM Spectrum Scale 4.2.3 IBM Spectrum Scale 4.2.2.0 IBM Spectrum Scale 4.2.1.0 IBM Spectrum Scale 4.2 IBM Spectrum Scale 4.1.1 IBM PureApplication System 2.2.1 IBM PureApplication System 2.2.4.0 IBM PureApplication System 2.2.3.2 IBM PureApplication System 2.2.3.1 IBM PureApplication System 2.2.3.0 IBM PureApplication System 2.2.2.2 IBM PureApplication System 2.2.2.1 IBM PureApplication System 2.2.2.0 IBM PureApplication System 2.2.0.0 IBM PureApplication System 2.1.2.4 IBM PureApplication System 2.1.2.3 IBM PureApplication System 2.1.2.2 IBM PureApplication System 2.1.2.1 IBM PureApplication System 2.1.2.0 IBM PureApplication System 2.1.1.0 IBM PureApplication System 2.1.0.2 IBM PureApplication System 2.1.0.1 IBM PureApplication System 2.1.0.0
Not Vulnerable:

IBM Spectrum Scale CVE-2017-1654 Local Information Disclosure Vulnerability

IBM Spectrum Scale is prone to a local information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 are vulnerable.