CVE-2018-1993

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

IBM Spectrum Scale (GPFS) 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache (LROC) is enabled may caused read operation on a file to return data from a different file. IBM X-Force ID: 154440.

Metrics

CVSS 3.0 3.3/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
IBM	Spectrum Scale	4.1.1; 4.2.0; 4.2.1; 4.2.2; 4.2.3; 5.0.0

References

http://www.securityfocus.com/bid/106485Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/154440VDB Entry, Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10793719Patch, Vendor Advisory
http://www.securityfocus.com/bid/106485Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/154440VDB Entry, Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10793719Patch, Vendor Advisory

Timeline

Published: Jan 8, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-199317.8An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a he CVE-2018-199325.5An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an i CVE-2018-199336.1Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry.CVE-2018-199344.8SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the Web management interface via URL path and HTTP POST p CVE-2018-199357.5ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and appli CVE-2018-199366.5PrinterOn Enterprise 4.1.4 allows Arbitrary File Deletion.CVE-2018-199376.6A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turni CVE-2018-199397.5The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devi CVE-2018-19949.8IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statement CVE-2018-199417.5A vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows an attacker to access sensitive information st CVE-2018-199426.1A cross-site scripting (XSS) vulnerability has been reported to affect earlier versions of File Station. If exploited, this vulnerability al CVE-2018-199435.4If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these is