CVE-2016-8939: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790...

IBM Tivoli Storage Manager Client Detection (Mac OS X SSH Login)

Detects the installed version of IBM Tivoli Storage Manager Client. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

IBM Spectrum Protect Client Instrumentation Log Credentials Disclosure

The version of IBM Spectrum Protect Client installed on the remote host is 5.5.x or 6.x prior to 6.4.3.5 or else 7.1.x prior to 7.1.6.5. It is, therefore, affected by an information disclosure vulnerability when using the 'set password' client command due to the full text of the command and the...

CVE-2016-8940

IBM Tivoli Storage Manager IBM Spectrum Protect 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these...

CVE-2016-8940

CVE-2016-8940 affects IBM Tivoli Storage Manager (IBM Spectrum Protect) servers. The IBM Security Bulletin and IBM/NVD entries describe an inadequate authority check on SQL queries, allowing an administrator to access product-specific database tables not meant for access, potentially exposing pas...

CVE-2016-8940: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Storage Manager IBM Spectrum Protect 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these...

IBM Spectrum Protect Server 7.1.1.0 - 7.1.7.0 SELECT Command RCE

IBM Spectrum Protect, formerly known as Tivoli Storage Manager, installed on the remote host is version 7.1.1.0 through 7.1.7.0. It is, therefore, affected by a buffer overflow condition when handling the SELECT command in a SQL query due to improper validation of input. An authenticated, remote...

CVE-2016-5985

The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...

CVE-2016-5985

The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...

CVE-2016-5985: Improper Restriction of Operations within the Bounds of a Memory Buffer

The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...

PT-2017-8840

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager IBM Spectrum Protect affected versions not specified Description The issue concerns a buffer overflow that occurs when Journal-Based Backup is enabled. This could allow a local attacker to execute arbitrary code on t...

IBM Spectrum Protect Client VM Backup INCLUDE.VMTSMVSS Option Credentials Disclosure

The version of IBM Spectrum Protect Client installed on the remote host is 7.1.x prior to 7.1.6.4. It is, therefore, affected by an information disclosure vulnerability due to the application exposing obfuscated VMware vCenter User ID and Password information during the VM backup process using th...

IBM Spectrum Protect Mount Detection

Binary data ibmtsmfastbackmountdetect.nbin...

CVE-2016-2988

IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments 6.4.x before 6.4.3.4 and 7.1.x before 7.1.6 allows remote authenticated users to bypass a TSM credential requirement and obtain administrative access by leveraging multiple...

CVE-2016-2988

CVE-2016-2988 affects IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (IBM Spectrum Protect for VE). A GUI flaw allows an authenticated user to bypass the TSM administrative credential requirement and perform admin‑level GUI tasks when multiple users are logged in....

PT-2016-5312

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments versions 6.4.x through 6.4.3.3 IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware aka...

Input validation

IBM Tivoli Storage Manager for Space Management aka Spectrum Protect for Space Management 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output...

CVE-2016-5927

CVE-2016-5927 affects IBM Tivoli Storage Manager for Space Management (Spectrum Protect for Space Management) versions 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6. The root cause is that enabling application tracing for the dsmsetpw command can cause the trace output to rev...

CVE-2016-3059

CVE-2016-3059 affects IBM Tivoli Storage Manager for Databases (IBM Spectrum Protect for Databases) and IBM Tivoli Storage FlashCopy Manager for Microsoft SQL Server (IBM Spectrum Protect Snapshot). The vulnerability allows local users to disclose the cleartext SQL Server password by reading the ...

CVE-2016-3059

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server aka IBM Spectrum Protect for Databases 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manager for Microsoft SQL Server aka IBM Spectrum Protect Snapshot 3.1 before 3.1.1.7 and 3.2 before...