CVE-2016-0392

EUVD-2016-0427
IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.4 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 17%
Affected Products (NVD)
VendorProductVersion
ibmelastic_storage_server
2.5.0
ibmelastic_storage_server
2.5.1
ibmelastic_storage_server
2.5.2
ibmelastic_storage_server
2.5.3
ibmelastic_storage_server
2.5.4
ibmelastic_storage_server
2.5.5
ibmelastic_storage_server
3.0.0
ibmelastic_storage_server
3.0.1
ibmelastic_storage_server
3.0.2
ibmelastic_storage_server
3.0.3
ibmelastic_storage_server
3.0.4
ibmelastic_storage_server
3.0.5
ibmelastic_storage_server
3.5.0
ibmelastic_storage_server
3.5.1
ibmelastic_storage_server
3.5.2
ibmelastic_storage_server
3.5.3
ibmelastic_storage_server
3.5.4
ibmelastic_storage_server
4.0.0
ibmelastic_storage_server
4.0.1
ibmelastic_storage_server
4.0.2
ibmgeneral_parallel_file_system_storage_server
2.0.0
ibmgeneral_parallel_file_system_storage_server
2.0.1
ibmgeneral_parallel_file_system_storage_server
2.0.2
ibmgeneral_parallel_file_system_storage_server
2.0.3
ibmgeneral_parallel_file_system_storage_server
2.0.4
ibmgeneral_parallel_file_system_storage_server
2.0.5
ibmgeneral_parallel_file_system_storage_server
2.0.6
ibmgeneral_parallel_file_system_storage_server
2.0.7
𝑥
= Vulnerable software versions