CVE-2016-8937

The CVE-2016-8937 entry concerns IBM Spectrum Protect (formerly Tivoli Storage Manager) 7.1 and 8.1. The vulnerability arises from the default authentication protocol disclosing too much information during authentication, enabling offline/dictionary-style brute-force attacks that could allow a us...

CVE-2017-1339

IBM Spectrum Protect Server (formerly Tivoli Storage Manager) 7.1 and 8.1 uses weak password encryption, allowing potential decryption of client/administrator passwords and leading to information disclosure or denial of service. Affected: 8.1.0.0–8.1.1.x; 7.1.0.0–7.1.7.x; 6.3 and below (EOS). Rem...

CVE-2017-1378

IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875...

IBM Spectrum Protect Information Disclosure Vulnerability

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from U.S.-based IBM that provides organizations with a single point of control and management, and support for backup and recovery of virtual, physical and cloud environments of all sizes. A...

IBM TSM Client 'password' Information Disclosure Vulnerability - Windows

IBM Tivoli Storage Manager Client is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

IBM Spectrum Protect Client Windows Registry Credentials Disclosure

The version of IBM Spectrum Protect Client installed on the remote Windows host is affected by an information disclosure vulnerability due to insecure permission for registry keys under the 'HKLM\Software\IBM\ADSM\CurrentVersion\Nodes' key. A local attacker can exploit this vulnerability to...

IBM Spectrum Protect / Tivoli Storage Manager Installed

Binary data ibmspectrumprotectinstalled.nbin...

CVE-2016-8939

IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790...

CVE-2016-8939

CVE-2016-8939 affects IBM Spectrum Protect (formerly Tivoli Storage Manager) Windows clients, where passwords are stored in the Windows Registry under HKLM\Software\IBM\ADSM\CurrentVersion\Nodes. The vulnerability enables a local attacker with sufficient privileges to disclose credentials stored ...

CVE-2016-8939

IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790...

IBM Tivoli Storage Manager Client Detection (Mac OS X SSH Login)

Detects the installed version of IBM Tivoli Storage Manager Client. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

IBM Spectrum Protect Client Instrumentation Log Credentials Disclosure

The version of IBM Spectrum Protect Client installed on the remote host is 5.5.x or 6.x prior to 6.4.3.5 or else 7.1.x prior to 7.1.6.5. It is, therefore, affected by an information disclosure vulnerability when using the 'set password' client command due to the full text of the command and the...

CVE-2016-8940

IBM Tivoli Storage Manager IBM Spectrum Protect 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these...

CVE-2016-8940

CVE-2016-8940 affects IBM Tivoli Storage Manager (IBM Spectrum Protect) servers. The IBM Security Bulletin and IBM/NVD entries describe an inadequate authority check on SQL queries, allowing an administrator to access product-specific database tables not meant for access, potentially exposing pas...

IBM Spectrum Protect Server 7.1.1.0 - 7.1.7.0 SELECT Command RCE

IBM Spectrum Protect, formerly known as Tivoli Storage Manager, installed on the remote host is version 7.1.1.0 through 7.1.7.0. It is, therefore, affected by a buffer overflow condition when handling the SELECT command in a SQL query due to improper validation of input. An authenticated, remote...

CVE-2016-5985

The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...

CVE-2016-5985

The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...

IBM Spectrum Protect Client VM Backup INCLUDE.VMTSMVSS Option Credentials Disclosure

The version of IBM Spectrum Protect Client installed on the remote host is 7.1.x prior to 7.1.6.4. It is, therefore, affected by an information disclosure vulnerability due to the application exposing obfuscated VMware vCenter User ID and Password information during the VM backup process using th...

IBM Spectrum Protect Mount Detection

Binary data ibmtsmfastbackmountdetect.nbin...

CVE-2016-2988

IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments 6.4.x before 6.4.3.4 and 7.1.x before 7.1.6 allows remote authenticated users to bypass a TSM credential requirement and obtain administrative access by leveraging multiple...