IBM Spectrum Scale / GPFS node file access path: An unprivileged but authenticated user on a GPFS node reads arbitrary

Impact

An unprivileged but authenticated user on a GPFS node reads arbitrary files available to that node, which on a shared cluster includes other tenants' data and any credential material sitting on the node.

Who can reach it

An account on any GPFS node - the exact situation on a multi-user training cluster where researchers get shells on the same login or compute nodes.

What to do

Upgrade to the fixed Spectrum Scale level in IBM's bulletin (4.1.1.21 / 4.2.3.11 / 5.0.1.3 or later). Also re-check whether shared login nodes should mount the whole filesystem namespace at all, or only per-tenant filesets.

References

Related entries

• IBM GPFS command line utility: Any unprivileged user with a shell on a GPFS node can force GPFS down on that nodeCVE-2018-1783 · IBM GPFS command line utilityMedium
• Slurm (slurmdbd.conf file permissions): slurmdbd.conf is installed world-readable, which leaks the accountingCVE-2019-19727 · Slurm (slurmdbd.conf file permissions)Medium
• Intel E810 adapter driver for Linux (< 1.0.4): Early E810 Linux driver flaw (improper input validation) reachableCVE-2020-24502 · Intel E810 adapter driver for Linux (< 1.0.4)Medium
• Intel E810 adapter driver for Linux (< 1.0.4): Early E810 Linux driver flaw (insufficient access control leadingCVE-2020-24503 · Intel E810 adapter driver for Linux (< 1.0.4)Medium
• Intel E810 adapter driver for Linux (< 1.0.4): Early E810 Linux driver flaw (uncontrolled resource consumption)CVE-2020-24504 · Intel E810 adapter driver for Linux (< 1.0.4)Medium
• IBM Spectrum Scale mmfsd daemon (RPC request handling): A local attacker floods mmfsd with RPC requests and crashes itCVE-2020-4491 · IBM Spectrum Scale mmfsd daemon (RPC request handling)Medium