PT-2016-4115

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.1 before 4.1.1.5 IBM Spectrum Scale versions 4.2 before 4.2.0.2 General Parallel File System versions 3.5 before 3.5.0.30 Description The issue allows local users to gain privileges or cause a denial of service by...

IBM Spectrum Scale and General Parallel File System Arbitrary Code Execution Vulnerability

IBM GPFS is an enterprise file management system optimized for petabyte-scale storage management.IBM Spectrum Scale is a data and file management solution based on IBM GPFS. A security vulnerability exists in IBM Spectrum Scale and GPFS that could be exploited by a local attacker to inject...

Apache Struts CVE-2016-1181 Remote Code Execution Vulnerability

Description Apache Struts is prone to a remote code-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts may cause a denial-of-service condition. Apache Struts 1.0 through...

PT-2016-1591

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Snapshot versions 3.1 through 3.1.1.3 IBM Spectrum Protect Snapshot versions 3.2 through 3.2.0.6 IBM Spectrum Protect Snapshot versions 4.1 through 4.1.4 IBM Spectrum Protect for Virtual Environments versions 6.3 through...

CVE-2015-7408

The server in IBM Spectrum Protect aka Tivoli Storage Manager 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which allows remote attackers to read or write to backup data by leveraging proxy authority...

Code injection

The server in IBM Spectrum Protect aka Tivoli Storage Manager 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which allows remote attackers to read or write to backup data by leveraging proxy authority...

CVE-2015-7408

The server in IBM Spectrum Protect aka Tivoli Storage Manager 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which allows remote attackers to read or write to backup data by leveraging proxy authority...

CVE-2015-7408

IBM Spectrum Protect (Tivoli Storage Manager) is affected by CVE-2015-7408. The server fails to properly restrict the ASNODENAME option, allowing a client session to proxy as another authorized session and read or write backup data. Affected server versions: 5.5, 6.x prior to 6.3.5.1, and 7.x pri...

CVE-2015-7408: Undefined Security Weakness

The server in IBM Spectrum Protect aka Tivoli Storage Manager 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which allows remote attackers to read or write to backup data by leveraging proxy authority...

PT-2016-3761

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 5.5 through 6.3.5.0 IBM Spectrum Protect versions 7.x through 7.1.3 Description The issue concerns the server in IBM Spectrum Protect, where it fails to properly restrict the use of the ASNODENAME option. This...

IBM Spectrum Scale LDAP Password Disclosure Vulnerability

IBM Spectrum Scale is a scalable data and file management solution based on IBM GPFS. When IBM Spectrum Scale deploys the File protocol using LDAP, a local attacker can exploit this vulnerability to obtain the LDAP password...

IBM Spectrum Protect Denial of Service Vulnerability

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from U.S.-based IBM that provides organizations with a single point of control and management, and support for backup and recovery of virtual, physical and cloud environments of all sizes. A deni...

CVE-2015-7488

IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol configurations, allows remote attackers to discover an LDAP password via unspecified vectors...

Design/Logic Flaw

IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol configurations, allows remote attackers to discover an LDAP password via unspecified vectors...

CVE-2015-7488

IBM Spectrum Scale (GPFS) is affected by CVE-2015-7488 in versions 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1. Descriptions across IBM security bulletins indicate that a local unprivileged user or a user with network access could obtain the LDAP bind directory password when the File protocol...

CVE-2015-7488

IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol configurations, allows remote attackers to discover an LDAP password via unspecified vectors...

CVE-2015-7488: Exposure of Sensitive Information to an Unauthorized Actor

IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol configurations, allows remote attackers to discover an LDAP password via unspecified vectors...

PT-2016-3795

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.1.1.x through 4.1.1.3 IBM Spectrum Scale versions 4.2.x through 4.2.0.0 Description The issue allows remote attackers to discover an LDAP password via unspecified vectors in certain LDAP File protocol...

Code injection

Client Acceptor Daemon CAD in the client in IBM Spectrum Protect formerly Tivoli Storage Manager 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service daemon crash via a crafted Web client URL...

CVE-2015-4951

Client Acceptor Daemon CAD in the client in IBM Spectrum Protect formerly Tivoli Storage Manager 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service daemon crash via a crafted Web client URL...