IBM Security Bulletin: IBM Spectrum LSF is affected by a privilege escalation vulnerability

IBM Spectrum LSF has addressed the following vulnerability. Enhancing the eauth executable file to prevent the preloading of getuid to avoid the users changing their job user at job submission time.

CVE(s): CVE-2018-1724

Affected product(s) and affected version(s):

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://dbluewas1.pok.ibm.com/support/docview.wss?uid=ibm10718373
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147439

The post IBM Security Bulletin: IBM Spectrum LSF is affected by a privilege escalation vulnerability appeared first on IBM PSIRT Blog.

Affected IBM Platform LSF

Affected Versions

IBM Spectrum LSF

10.1

IBM Spectrum LSF

9.1.1

IBM Spectrum LSF

9.1.2

IBM Spectrum LSF

9.1.3



from IBM Product Security Incident Response Team https://ift.tt/2OaQs7b