1473 matches found
CVE-2017-1378
IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875...
CVE-2017-1301
IBM Spectrum Protect (formerly Tivoli Storage Manager) clients on Unix are affected by CVE-2017-1301 due to insecure creation of temporary files, enabling a local attacker to use a symbolic link to overwrite arbitrary files with elevated privileges. The IBM Security Bulletin (BB7A838D7424E3443EC4...
CVE-2017-1301
IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the...
CVE-2017-1339
IBM Spectrum Protect Server (formerly Tivoli Storage Manager) 7.1 and 8.1 uses weak password encryption, allowing potential decryption of client/administrator passwords and leading to information disclosure or denial of service. Affected: 8.1.0.0–8.1.1.x; 7.1.0.0–7.1.7.x; 6.3 and below (EOS). Rem...
CVE-2016-8937
The CVE-2016-8937 entry concerns IBM Spectrum Protect (formerly Tivoli Storage Manager) 7.1 and 8.1. The vulnerability arises from the default authentication protocol disclosing too much information during authentication, enabling offline/dictionary-style brute-force attacks that could allow a us...
CVE-2017-1339
IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force I...
CVE-2017-1301: Improper Link Resolution Before File Access
IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the...
CVE-2016-8937: Improper Authentication
The IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 default authentication protocol is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server. IBM X-Force ID: 118750...
PT-2017-12850
Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 8.1 Description The issue allows a local attacker to launch a symlink attack. This is possible because the IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacke...
CVE-2017-1339: Use of a Broken or Risky Cryptographic Algorithm
IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force I...
CVE-2017-1378: Insufficiently Protected Credentials
IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875...
PT-2017-12976
Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 8.1 Description The issue concerns the use of weak encryption for passwords in IBM Spectrum Protect Server, which could allow a database administrator to decrypt client or administrator passwords. This...
PT-2017-13095
Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 8.1 Description The issue allows a local user to obtain unencrypted login credentials to Vmware vCenter from the application trace output. Recommendations For IBM Spectrum Protect versions 7.1 through...
IBM Spectrum Protect Information Disclosure Vulnerability
IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from U.S.-based IBM that provides organizations with a single point of control and management, and support for backup and recovery of virtual, physical and cloud environments of all sizes. A...
IBM TSM Client 'password' Information Disclosure Vulnerability - Windows
IBM Tivoli Storage Manager Client is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
IBM Spectrum Protect / Tivoli Storage Manager Installed
Binary data ibmspectrumprotectinstalled.nbin...
IBM Spectrum Protect Client Windows Registry Credentials Disclosure
The version of IBM Spectrum Protect Client installed on the remote Windows host is affected by an information disclosure vulnerability due to insecure permission for registry keys under the 'HKLM\Software\IBM\ADSM\CurrentVersion\Nodes' key. A local attacker can exploit this vulnerability to...
CVE-2016-8939
IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790...
CVE-2016-8939
CVE-2016-8939 affects IBM Spectrum Protect (formerly Tivoli Storage Manager) Windows clients, where passwords are stored in the Windows Registry under HKLM\Software\IBM\ADSM\CurrentVersion\Nodes. The vulnerability enables a local attacker with sufficient privileges to disclose credentials stored ...