CVE-2016-2984

CVE-2016-2984 describes a local privilege escalation vulnerability affecting IBM Spectrum Scale versions 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4, as well as General Parallel File System (GPFS) versions 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8. The vulnerability allows a local user to gain elevated privileges by providing specially crafted command-line parameters to a setuid program located at /usr/lpp/mmfs/bin/. With a CVSSv3 score of 7.0 (HIGH), this vulnerability has a local attack vector and high impact on confidentiality, integrity, and availability, though it requires high attack complexity. The EPSS score is very low, suggesting a minimal likelihood of exploitation in the wild. There is no evidence of active exploitation, nor is there any known public exploit code available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also absent, indicating a lack of widespread attention or exploitation.