CVE-2017-1339

IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force I...

Code injection

IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the...

CVE-2017-1301

IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the...

CVE-2016-8937

The IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 default authentication protocol is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server. IBM X-Force ID: 118750...

CVE-2017-1339

IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force I...

Information disclosure

IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force I...

CVE-2017-1378

IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875...

CVE-2017-1378

IBM Spectrum Protect (formerly Tivoli Storage Manager) contains a local-credential disclosure when application tracing reveals unencrypted vCenter login details. Affected products include IBM Spectrum Protect Client (7.1.0.0–7.1.6.6; 6.4 and below are EOS) and IBM Spectrum Protect for Virtual Env...

CVE-2017-1301

IBM Spectrum Protect (formerly Tivoli Storage Manager) clients on Unix are affected by CVE-2017-1301 due to insecure creation of temporary files, enabling a local attacker to use a symbolic link to overwrite arbitrary files with elevated privileges. The IBM Security Bulletin (BB7A838D7424E3443EC4...

CVE-2016-8937

The CVE-2016-8937 entry concerns IBM Spectrum Protect (formerly Tivoli Storage Manager) 7.1 and 8.1. The vulnerability arises from the default authentication protocol disclosing too much information during authentication, enabling offline/dictionary-style brute-force attacks that could allow a us...

CVE-2017-1301

IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the...

CVE-2017-1339

IBM Spectrum Protect Server (formerly Tivoli Storage Manager) 7.1 and 8.1 uses weak password encryption, allowing potential decryption of client/administrator passwords and leading to information disclosure or denial of service. Affected: 8.1.0.0–8.1.1.x; 7.1.0.0–7.1.7.x; 6.3 and below (EOS). Rem...

CVE-2017-1339

IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force I...

CVE-2017-1378

IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875...

SeaWell Networks Spectrum SDC Trust Management Vulnerability

SeaWell Networks Spectrum SDC is a video solution. The solution utilizes ABR repackaging technology to simplify IP video delivery using a common format. A security vulnerability exists in SeaWell Networks Spectrum SDC version 02.05.00. The vulnerability stems from the program's use of default wea...

IBM Spectrum Protect Information Disclosure Vulnerability

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from U.S.-based IBM that provides organizations with a single point of control and management, and support for backup and recovery of virtual, physical and cloud environments of all sizes. A...

SeaWell Networks Spectrum SDC Improper Authorization Vulnerability

SeaWell Networks Spectrum SDC is a video solution. The solution utilizes ABR repackaging technology to simplify IP video delivery using a common format. A security vulnerability exists in SeaWell Networks Spectrum SDC version 02.05.00. A remote attacker could exploit the vulnerability to perform...

SeaWell Networks Spectrum SDC Path Traversal Vulnerability

SeaWell Networks Spectrum SDC is a video solution. The solution utilizes ABR repackaging technology to simplify IP video delivery using a common format. A directory traversal vulnerability exists in the configuremanage.php file in SeaWell Networks Spectrum SDC version 02.05.00. A remote attacker...

spectrum-et.org XSS vulnerability

Open Bug Bounty ID: OBB-255946 Description| Value ---|--- Affected Website:| spectrum-et.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

IBM TSM Client 'password' Information Disclosure Vulnerability - Windows

IBM Tivoli Storage Manager Client is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...