IBM Spectrum Lsf vulnerabilities

4 CVEs affecting IBM Spectrum Lsf, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-4983, published 2021-01-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-4983, published 2021-01-20. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execute arbitrary commands. IBM X-Force ID: 192586.
CVE-2018-1724, published 2018-10-11. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file permission settings. IBM X-Force ID: 147439.
CVE-2017-1205, published 2017-04-14. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges and obtain root access. IBM X-Force ID: 123741.
CVE-2020-4278, published 2020-03-05. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Platform LSF 9.1 and 10.1, IBM Spectrum LSF Suite 10.2, and IBM Spectrum Suite for HPA 10.2 could allow a local user to escalate their privileges due to weak file permissions when specific debug…