CWE Code: 77
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Neutralization of Special Elements used in a Command ('Command Injection')
Summary: ibm general parallel file system (gpfs) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and spectrum scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for command execution via unspecified vectors.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2015-10-26
Last Modified Date: 2016-12-06