Versions
5.0.5.6
5.0.5.4
5.1.6.1
5.0.4.4
5.1.5.0
5.1.0
4.2.3
5.1
4.2.3.17
5.0.4.1
5.1.0.0
5.0.0
5.1.2.9
4.2.3.10
5.0.5.2
5.0.5
5.0.5.5
4.1.1.20
4.2.3.23
4.2.0.0
5.0.1.0
5.0
5.1.0.3
5.0.3.2
5.0.5.0
5.1.3.0
4.1.1.0
4.1.1
4.2.2
5.1.0.2
5.0.1.2
5.1.0.1
5.1.1.1
1.1.1.0
4.2.1
4.2.3.22
4.2.3.21
4.2.0
4.2
5.0.0.0
1.1.8.4
5.1.5.1
5.0.1.1
5.0.4.3
Recent CVEs
CVE-2022-43843
IBM Spectrum Scale 5.1.5.0 through 5.1.5.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 239080.
CVE-2023-30434
IBM Storage Scale (IBM Spectrum Scale 5.1.0.0 through 5.1.2.9, 5.1.3.0 through 5.1.6.1 and IBM Elastic Storage Systems 6.1.0.0 through 6.1.2.5, 6.1.3.0 through 6.1.6.0) could allow a local user to cause a kernel panic. IBM X-Force ID: 252187.
CVE-2020-4927
A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191695.
CVE-2022-43869
IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage System (6.1.0.0 through 6.1.2.4 and 6.1.3.0 through 6.1.4.1) could allow an authenticated user to cause a denial of service through the GUI using a format string attack. IBM X-Force ID: 239539.
CVE-2020-4926
A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191600.
CVE-2022-22368
IBM Spectrum Scale 5.1.0 through 5.1.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 221012.
CVE-2020-4925
A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests. IBM X-Force ID: 191599.