/usr/lpp/mmfs/bin/gpfs.snap in IBM General Parallel File System (GPFS) 4.1 prior to 4.1.0.7 produces an archive potentially containing cleartext keys, and lacks a warning about reviewing this archive to detect included keys, which might allow remote malicious users to obtain sensitive information by leveraging access to a technical-support data stream.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm general parallel file system 4.1 |
Vulmon