Code injection

IBM Tivoli Storage Manager Server IBM Spectrum Protect 7.1 and 8.1 could allow a local user to replace existing databases by restoring old data. IBM X-Force ID: 158336...

Stack overflow

IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by servers and storage agents in response to specifically crafted communication exchanges. By sending an overly long request, a remote attacker could...

Design/Logic Flaw

IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, caused by an error message containing a stack trace. By creating an error with a stack trace, an attacker could exploit this vulnerability to potentially obtain details on the...

Code injection

IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused by loading a specially crafted library loaded by the dsmqsan module. By setting up such a library, a local attacker could exploit this vulnerability to gain...

CVE-2019-4140

IBM Tivoli Storage Manager Server IBM Spectrum Protect 7.1 and 8.1 could allow a local user to replace existing databases by restoring old data. IBM X-Force ID: 158336...

CVE-2019-4140

CVE-2019-4140 affects IBM Spectrum Protect Server (formerly IBM Tivoli Storage Manager) 7.1 and 8.1. The issue allows a local user to replace existing databases by restoring old data, potentially overwriting databases. Affected versions: 8.1.0.0–8.1.7.x and 7.1.0.0–7.1.9.200. Remediation: upgrade...

CVE-2019-4129

CVE-2019-4129 affects IBM Spectrum Protect Operations Center (versions 7.1–8.1). The root cause is an error message that may display a stack trace, enabling a remote attacker to obtain sensitive information about the Operations Center architecture. Public details in multiple sources (IBM bulletin...

CVE-2019-4088

CVE-2019-4088 affects IBM Spectrum Protect Server versions 7.1 and 8.1 and related Storage Agents. The issue is a local privilege-escalation caused by loading a specially crafted library via the dsmqsan module, allowing a local attacker to gain root privileges on the vulnerable system. Affected r...

CVE-2019-4088

IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused by loading a specially crafted library loaded by the dsmqsan module. By setting up such a library, a local attacker could exploit this vulnerability to gain...

CVE-2019-4129

IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, caused by an error message containing a stack trace. By creating an error with a stack trace, an attacker could exploit this vulnerability to potentially obtain details on the...

CVE-2019-4087

IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by servers and storage agents in response to specifically crafted communication exchanges. By sending an overly long request, a remote attacker could...

CVE-2019-4087

IBM Spectrum Protect Server and Storage Agent versions 7.1 and 8.1 are affected by a stack-based buffer overflow due to improper bounds checking in communication exchanges, enabling remote code execution or crash via oversized requests. Physical components: Spectrum Protect Server and Storage Age...

Security Bulletin: Stack-based buffer overflow and elevation of privileges vulnerabilities in IBM Spectrum Protect Server and Storage Agents (CVE-2019-4087, CVE-2019-4088)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Server and Storage Agents are vulnerable to a stack-based buffer overflow and elevation of privileges. Vulnerability Details CVEID: CVE-2019-4087 DESCRIPTION: IBM Spectrum Protect Servers and Storage Agents are vulnerable to a...

IBM Spectrum Protect Access Control Error Vulnerability

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from IBM in the United States. The platform provides organizations with a single point of control and management, and supports backup and recovery for virtual, physical and cloud environments of...

PT-2019-16910 · Ibm · Ibm Spectrum Protect Operations Center

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Operations Center versions 7.1 through 8.1 Description: The issue allows a remote attacker to obtain sensitive information due to an error message containing a stack trace. By creating an error with a stack trace, an...

PT-2019-16892 · Ibm · Ibm Spectrum Protect Storage Agents +1

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Servers versions 7.1 through 8.1 IBM Spectrum Protect Storage Agents versions 7.1 through 8.1 Description: A local attacker could gain elevated privileges on the system by loading a specially crafted library loaded by the...

PT-2019-2561 · Ibm · Ibm Spectrum Protect Storage Agents +1

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Servers versions 7.1 through 8.1 IBM Spectrum Protect Storage Agents versions 7.1 through 8.1 Description: The issue is related to a stack-based buffer overflow caused by improper bounds checking in response to specifical...

CVE-2019-4357

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a redirected restore operation specifying a target path may allow execution of arbitrary code on the system. IBM X-Force ID: 161667,...

CVE-2019-4383

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a redirected restore operation may result in an escalation of user privileges. IBM X-Force ID: 162165...

CVE-2019-4383

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a redirected restore operation may result in an escalation of user privileges. IBM X-Force ID: 162165...