PT-2016-6730

Name of the Vulnerable Software and Affected Versions IBM Spectrum Control versions 5.2.x before 5.2.11 Description The issue allows remote authenticated users to read arbitrary files by utilizing a directory traversal technique, specifically through the use of a .. dot dot in a URL...

PT-2016-6728

Name of the Vulnerable Software and Affected Versions IBM Spectrum Control versions 5.2.x through 5.2.10 Description A cross-site scripting XSS issue exists in the Web UI, allowing remote authenticated users to inject arbitrary web script or HTML via an embedded string. This could potentially lea...

PT-2016-6727

Name of the Vulnerable Software and Affected Versions IBM Spectrum Control formerly Tivoli Storage Productivity Center versions 5.2.x before 5.2.11 Description The issue allows remote authenticated users to bypass intended access restrictions. This enables them to read task details or edit...

PT-2016-6731

Name of the Vulnerable Software and Affected Versions IBM Spectrum Control formerly Tivoli Storage Productivity Center versions 5.2.x before 5.2.11 Description The issue allows remote authenticated users to conduct clickjacking attacks via a crafted web site. Recommendations For versions 5.2.x...

CVE-2016-5945: Improper Access Control

IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to upload non-executable files via a crafted HTTP request...

PT-2016-6729

Name of the Vulnerable Software and Affected Versions IBM Spectrum Control formerly Tivoli Storage Productivity Center versions 5.2.x before 5.2.11 Description The issue allows remote authenticated users to upload non-executable files via a crafted HTTP request. Recommendations For versions 5.2.x...

Apache Struts CVE-2016-1181 Remote Code Execution Vulnerability

Description Apache Struts is prone to a remote code-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts may cause a denial-of-service condition. Apache Struts 1.0 through...