Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Atos Eviden SMC xScale before 1.6.6. During initialization of nodes, some configuration parameters are retrieved from management nodes. These parameters embed credentials whose integrity and confidentiality may be important to the security of the HPC configuration. Because these parameters are needed for initialization, there is no available mechanism to ensure access control on the management node, and a mitigation measure is normally put in place to prevent access to unprivileged users. It was discovered that this mitigation measure does not survive a reboot of diskful nodes. (Diskless nodes are not at risk.) The mistake lies in the cloudinit configuration: the iptables configuration should have been in the bootcmd instead of the runcmd section.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Atos Eviden SMC xScale 安全漏洞
Vulnerability Description
Atos Eviden SMC xScale是法国Atos公司的一款数据驱动程序。 Atos Eviden SMC xScale 1.6.6之前版本存在安全漏洞，该漏洞源于节点初始化过程中，用于初始化的配置参数包含凭证信息，这些参数在管理节点上缺乏访问控制机制，且在磁盘节点重启后，防止未授权用户访问的缓解措施失效。
CVSS Information
N/A
Vulnerability Type
N/A