Security Bulletin: Multiple vulnerabilities in the IBM GSKit component of IBM Spectrum Protect for Workstations (formerly Tivoli Storage Manager FastBack for Workstations)

Summary There are multiple vulnerabilities in the IBM GSKit component of IBM Spectrum Protect for Workstations formerly Tivoli Storage Manager for Workstations. IBM Spectrum Protect for Workstations has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-0702 DESCRIPTION: OpenSSL...

PT-2018-12539

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 7.2 IBM Spectrum Protect Snapshot versions 4.1.3, 4.1.4, 4.1.6 Description The GSKit CMS KDB logic fails to salt the hash function, resulting in weaker than expected protection of passwords. This...