PT-2017-8865

Name of the Vulnerable Software and Affected Versions Tivoli Storage Manager Operations Center affected versions not specified Description The issue allows a local user to take over a previously logged in user due to session expiration not being enforced. Recommendations At the moment, there is n...

CVE-2016-5985: Improper Restriction of Operations within the Bounds of a Memory Buffer

The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...

PT-2017-8867

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager Operations Center affected versions not specified Description The issue allows an attacker to execute malicious and unauthorized actions by exploiting a cross-site request forgery weakness. This could happen when the...

PT-2017-8901

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager affected versions not specified Description The issue allows a local user to obtain unencrypted login credentials that are disclosed to Vmware vCenter. Recommendations At the moment, there is no information about a...

PT-2017-8840

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager IBM Spectrum Protect affected versions not specified Description The issue concerns a buffer overflow that occurs when Journal-Based Backup is enabled. This could allow a local attacker to execute arbitrary code on t...

PT-2017-8868

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager Operations Center affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

CVE-2016-6110: Undefined Security Weakness

IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user...

PT-2017-8858

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Virtual Environments VMware affected versions not specified Description The issue could disclose Windows domain credentials to a user with a high level of privileges. Recommendations At the moment, there is no...

CVE-2016-0371: Undefined Security Weakness

The Tivoli Storage Manager TSM password may be displayed in plain text via application trace output while application tracing is enabled...

IBM Tivoli Storage Manager FastBack Server Denial of Service (CVE-2015-8523)

A denial of service vulnerability exists in IBM Tivoli Storage Manager FastBack Server. A remote unauthenticated attacker can exploit this vulnerability by sending crafted requests to port 11460/TCP...

IBM Spectrum Protect Client VM Backup INCLUDE.VMTSMVSS Option Credentials Disclosure

The version of IBM Spectrum Protect Client installed on the remote host is 7.1.x prior to 7.1.6.4. It is, therefore, affected by an information disclosure vulnerability due to the application exposing obfuscated VMware vCenter User ID and Password information during the VM backup process using th...

IBM Tivoli Storage Manager Local Information Disclosure Vulnerability (CNVD-2017-00328)

IBM Tivoli Storage Manager TSM is a suite of backup and recovery management solutions from IBM USA. The solution supports data protection, space management and archiving, business recovery, and disaster recovery.IBM Tivoli Storage Manager Client is a storage-based solution in the IT Administrator...

IBM Tivoli Storage Manager FastBack Mount CMountDismount::GetVaultDump RCE

The IBM Tivoli Storage Manager TSM FastBack Mount application running on the remote host is affected by a remote code execution vulnerability in the FastBackServer.exe service due to improper validation of user-supplied input to the CMountDismount::GetVaultDump method. An unauthenticated, remote...

Vulnerability in IBM Tivoli Storage Manager Operations Center

IBM Tivoli Storage Manager Operations Center is a next-generation solution from IBM USA that simplifies backup management. The solution provides a centralized view of backup issues across multiple TSM servers and extends features such as DB2 databases. A security vulnerability exists in IBM Tivol...

IBM Tivoli Storage Manager Operations Center Security Bypass Vulnerability

IBM Tivoli Storage Manager Operations Center is a next-generation solution from IBM USA that simplifies backup management. The solution provides a centralized view of backup issues across multiple TSM servers and extends features such as DB2 databases. A security bypass vulnerability exists in IB...

IBM Tivoli Storage Manager Operations Center Cross-Site Request Forgery Vulnerability

IBM Tivoli Storage Manager Operations Center is a next-generation solution from IBM USA that simplifies backup management. The solution provides a centralized view of backup issues across multiple TSM servers and extends features such as DB2 databases. A cross-site request forgery vulnerability...

IBM Tivoli Storage Manager Operations Center Cross-Site Scripting Vulnerability

IBM Tivoli Storage Manager Operations Center is a next-generation solution from IBM USA that simplifies backup management. The solution provides a centralized view of backup issues across multiple TSM servers and extends features such as DB2 databases. A cross-site scripting vulnerability exists ...

IBM Tivoli Storage Manager Client Local Buffer Overflow Vulnerability

IBM Tivoli Storage Manager Client is a storage-based solution in the IT administrator management component of IBM USA specifically tailored for enterprise use of IBM products. A local buffer overflow vulnerability exists in IBM Tivoli Storage Manager Client that stems from a failure to adequately...

CVE-2016-2988

IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments 6.4.x before 6.4.3.4 and 7.1.x before 7.1.6 allows remote authenticated users to bypass a TSM credential requirement and obtain administrative access by leveraging multiple...

CVE-2016-2988

IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments 6.4.x before 6.4.3.4 and 7.1.x before 7.1.6 allows remote authenticated users to bypass a TSM credential requirement and obtain administrative access by leveraging multiple...