Security Bulletin: IBM Tivoli Storage FlashCopy Manager 4.1 and 3.2 UNIX and VMware is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298, CVE-ID: CVE-2014-3470

Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. Vulnerability Details CVE-ID: CVE-2014-0224 DESCRIPTION: OpenSSL is vulnerable to a man-in-the-middle attack, caused by the use of weak keying material in SSL/TLS clients an...

Security Bulletin: Privilege Escalation Vulnerability in the FlashCopy Manager for VMware GUI (CVE-2013-6714)

Summary In customer environments that utilize VMware restricted users, users of the Tivoli Storage FlashCopy Manager: FlashCopy Manager for VMware GUI can back up and restore VMs that they are not authorized to access. Vulnerability Details CVE ID: CVE-2013-6714 DESCRIPTION: In customer...

IBM Tivoli Storage Manager for Virtual Environments: Data Protection for Vmware and Tivoli Storage FlashCopy Manager for Vmware Cross-Site Request Forgery Vulnerabilities

IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments and Tivoli Storage FlashCopy Manager for VMware a.k.a. Spectrum Protect Snapshot are both products of IBM USA. The former is a VM backup and recovery solution. The latter ...

CVE-2016-3059

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server aka IBM Spectrum Protect for Databases 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manager for Microsoft SQL Server aka IBM Spectrum Protect Snapshot 3.1 before 3.1.1.7 and 3.2 before...

CVE-2016-3059

CVE-2016-3059 affects IBM Tivoli Storage Manager for Databases (IBM Spectrum Protect for Databases) and IBM Tivoli Storage FlashCopy Manager for Microsoft SQL Server (IBM Spectrum Protect Snapshot). The vulnerability allows local users to disclose the cleartext SQL Server password by reading the ...

CVE-2016-3059: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server aka IBM Spectrum Protect for Databases 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manager for Microsoft SQL Server aka IBM Spectrum Protect Snapshot 3.1 before 3.1.1.7 and 3.2 before...

CVE-2015-7425: Undefined Security Weakness

The Data Protection component in the VMware vSphere GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments 6.3 before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.4 and Tivoli Storage FlashCopy Manager for VMware aka...

IBM Tivoli Storage FlashCopy Manager for VMware 3.1.x < 3.1.1.3 / 3.2.x < 3.2.0.6 / 4.1.x < 4.1.4.0 Command Execution

The version of IBM Tivoli Storage FlashCopy Manager for VMware installed on the remote host is affected by multiple vulnerabilities : - An unspecified flaw exists in the graphical user interface that allows an unauthenticated, remote attacker to perform backup and restore operations, along with...

CVE-2015-7429: Exposure of Sensitive Information to an Unauthorized Actor

The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments 7.1 before 7.1.4 and Tivoli Storage FlashCopy Manager for VMware aka Spectrum Protect Snapshot 4.1 before 4.1.4 allows...

CVE-2015-7426: Improper Neutralization of Special Elements used in an OS Command

The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments 7.1 before 7.1.3.0 and Tivoli Storage FlashCopy Manager for VMware aka Spectrum Protect Snapshot 4.1 before 4.1.3.0 allo...

IBM Tivoli Storage FlashCopy Manager and Tivoli Storage Manager local boost vulnerability (CNVD-2015-08435)

IBM Tivoli Storage FlashCopy Manager is a suite of software that provides a high level of data protection for critical applications and databases through integrated snapshot capabilities.Tivoli Storage Manager is a suite of software that automates data protection for e-mail servers. A security...

IBM Tivoli Storage FlashCopy Manager and Tivoli Storage Manager Local Privilege Vulnerability

IBM Tivoli Storage FlashCopy Manager is a suite of software that provides a high level of data protection for critical applications and databases through integrated snapshot capabilities.Tivoli Storage Manager is a suite of software that automates data protection for e-mail servers. A security...

CVE-2015-7404: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server aka Spectrum Protect for Databases 5.5 before 5.5.6.2, 6.3 before 6.3.1.6, 6.4 before 6.4.1.8, and 7.1 before 7.1.4; Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server aka Spectrum Prote...

IBM Tivoli Storage FlashCopy Manager Installed (Linux)

Binary data tivolistorageflashcopymanagerinstalledlinux.nbin...

IBM Tivoli Storage FlashCopy Manager for VMware 3.1.x < 3.1.1.3 / 3.2.x < 3.2.0.6 / 4.1.x < 4.1.3.0 XSS

The version of IBM Tivoli Storage FlashCopy Manager for VMware installed on the remote host is affected by a cross-site scripting XSS vulnerability, due to improper validation of input before returning it to users. An unauthenticated, remote attacker can exploit this, via a specially crafted link...

PT-2015-5534

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware versions 6.3 through 6.3.2.4 IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware versions 6.4 through 6.4.3.0 IBM Tivoli Storage Manage...

CVE-2015-1988: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware 6.3 before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 and Tivoli Storage FlashCopy Manager for VMware 3.1 before 3.1.1.3, 3.2 before 3.2.0.6, and 4.1 before 4.1.3.0 allo...

Design/Logic Flaw

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server 7.1 before 7.1.2, Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 7.1 before 7.1.2, and Tivoli Storage FlashCopy Manager 4.1 before 4.1.2 place cleartext passwords in exception...

CVE-2015-4949

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server 7.1 before 7.1.2, Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 7.1 before 7.1.2, and Tivoli Storage FlashCopy Manager 4.1 before 4.1.2 place cleartext passwords in exception...

CVE-2015-6557

The CVE-2015-6557 issue affects IBM Tivoli Storage Manager suites (Databases, Mail, FlashCopy Manager) when application tracing is enabled. It discloses cleartext passwords in trace output or GUI exception messages, allowing a local attacker with access to the system to obtain sensitive credentia...