Sql injection

2016-08-0801:59:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.6%

JSON

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (aka IBM Spectrum Protect for Databases) 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manager for Microsoft SQL Server (aka IBM Spectrum Protect Snapshot) 3.1 before 3.1.1.7 and 3.2 before 3.2.1.9 allow local users to discover a cleartext SQL Server password by reading the Task List in the MMC GUI.

CPENameOperatorVersion
tivoli_storage_flashcopy_manager_for_sql_serverge3.1.0.0
tivoli_storage_flashcopy_manager_for_sql_serverle3.1.1.6
tivoli_storage_flashcopy_manager_for_sql_serverge3.2.0.0
tivoli_storage_flashcopy_manager_for_sql_serverle3.2.1.8
tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_serverge6.3.0.0
tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_serverle6.3.1.8
tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_serverge6.4.0.0
tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_serverle6.4.1.8

Name	Operator	Version
tivoli_storage_flashcopy_manager_for_sql_server	ge	3.1.0.0
tivoli_storage_flashcopy_manager_for_sql_server	le	3.1.1.6
tivoli_storage_flashcopy_manager_for_sql_server	ge	3.2.0.0
tivoli_storage_flashcopy_manager_for_sql_server	le	3.2.1.8
tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server	ge	6.3.0.0
tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server	le	6.3.1.8
tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server	ge	6.4.0.0
tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server	le	6.4.1.8