EUVD-2015-7332

Malware in sbrugna...

IBM Spectrum Protect File Read Vulnerability

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from U.S.-based IBM that provides organizations with a single point of control and management, and support for backup and recovery of virtual, physical and cloud environments of all sizes. A...

CVE-2015-7408

The server in IBM Spectrum Protect aka Tivoli Storage Manager 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which allows remote attackers to read or write to backup data by leveraging proxy authority...

CVE-2015-7408

IBM Spectrum Protect (Tivoli Storage Manager) is affected by CVE-2015-7408. The server fails to properly restrict the ASNODENAME option, allowing a client session to proxy as another authorized session and read or write backup data. Affected server versions: 5.5, 6.x prior to 6.3.5.1, and 7.x pri...