Skip to content
Sign in
7.4 High

CVE-2020-4278 IBM Platform LSF 9.1 and 10.1, IBM Spectrum LSF Suite 10.2, and IBM Spectrum Suite for HPA 10.2 could allow a local user…

Description

IBM Platform LSF 9.1 and 10.1, IBM Spectrum LSF Suite 10.2, and IBM Spectrum Suite for HPA 10.2 could allow a local user to escalate their privileges due to weak file permissions when specific debug settings are enabled in a Linux or Unix enviornment. IBM X-Force ID: 176137.

Affected products and versions

Product Affected versions Fixed in
Spectrum LSF 10.1 No fix stated
Spectrum LSF 9.1 No fix stated
Spectrum LSF Suites 10.2 No fix stated
Spectrum Computing Suite for High Performance Analytics 10.2 No fix stated

Other CVEs of Spectrum LSF

The 3 CVEs of Spectrum LSF →
CVE-2020-4983 IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to… 7.4 High CVE-2018-1724 IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time… 5.9 Medium
Track this CVE