Lucene search

K
cve[email protected]CVE-2016-5947
HistorySep 26, 2016 - 4:59 a.m.

CVE-2016-5947

2016-09-2604:59:20
CWE-20
web.nvd.nist.gov
18
ibm
spectrum control
tivoli storage productivity center
cve-2016-5947
clickjacking
nvd

5.7 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

5.4 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

43.4%

IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.

Affected configurations

NVD
Node
ibmtivoli_storage_productivity_centerMatch5.2.0
OR
ibmtivoli_storage_productivity_centerMatch5.2.1
OR
ibmtivoli_storage_productivity_centerMatch5.2.1.1
OR
ibmtivoli_storage_productivity_centerMatch5.2.2
OR
ibmtivoli_storage_productivity_centerMatch5.2.3
OR
ibmtivoli_storage_productivity_centerMatch5.2.4
OR
ibmtivoli_storage_productivity_centerMatch5.2.4.1
OR
ibmtivoli_storage_productivity_centerMatch5.2.5
OR
ibmtivoli_storage_productivity_centerMatch5.2.5.1
OR
ibmtivoli_storage_productivity_centerMatch5.2.6
OR
ibmtivoli_storage_productivity_centerMatch5.2.7
OR
ibmtivoli_storage_productivity_centerMatch5.2.7.1
Node
ibmspectrum_controlMatch5.2.8
OR
ibmspectrum_controlMatch5.2.9
OR
ibmspectrum_controlMatch5.2.10
OR
ibmspectrum_controlMatch5.2.10.1

5.7 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

5.4 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

43.4%

Related for CVE-2016-5947