CVE-2019-4093

IBM Tivoli Storage Manager IBM Spectrum Protect 8.1.7 could allow a user to restore files and directories using IBM Spectrum Prootect Client Web User Interface on Windows that they should not have access to due to incorrect file permissions. IBM X-Force ID: 157981...

CVE-2019-4093

IBM Spectrum Protect (formerly Tivoli Storage Manager) Backup-Archive Client Web UI on Windows (version 8.1.7) is affected by CVE-2019-4093, caused by incorrect file permissions that could allow a user to restore files and directories they should not access. IBM’s security bulletin lists a CVSS v...

PT-2019-16894

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager IBM Spectrum Protect version 8.1.7 Description The issue allows a user to restore files and directories using the IBM Spectrum Protect Client Web User Interface on Windows that they should not have access to due to...

IBM Spectrum Protect CVE-2018-1853 Clickjacking Vulnerability

Description IBM Spectrum Protect is prone to an clickjacking vulnerability. Successful exploits will allow an authenticated attacker to compromise the affected application or obtain sensitive information. Other attacks are also possible. Technologies Affected IBM Spectrum Protect Backup-Archive...

CVE-2019-4093: Incorrect Permission Assignment for Critical Resource

IBM Tivoli Storage Manager IBM Spectrum Protect 8.1.7 could allow a user to restore files and directories using IBM Spectrum Prootect Client Web User Interface on Windows that they should not have access to due to incorrect file permissions. IBM X-Force ID: 157981...

X (Formerly Twitter): Protected Tweets setting overridden by Android app

Summary: Protected Tweets setting overridden by Android app Description: The Android app overrides the "Protect your Tweets" setting set from outside the app in some cases when changing other settings. Steps To Reproduce: 1. Log in to an account with unprotected tweets on the Android app. 1. Log ...

Security Bulletin: Incorrect permissions on restored files and directories using IBM Spectrum Protect Backup-Archive Client web user interface on Windows (CVE-2019-4093)

Summary Files and directories restored using the IBM Spectrum Protect formerly Tivoli Storage Manager Backup-Archive Client web user interface on Windows may have incorrect permissions. Vulnerability Details CVEID: CVE-2019-4093 DESCRIPTION: IBM Tivoli Storage Manager could allow a user to restor...

PT-2019-6329

Name of the Vulnerable Software and Affected Versions GNU Compiler Collection GCC versions 4.1 through 8 Description The issue is related to the stack protect prologue in cfgexpand.c and stack protect epilogue in function.c functions in GNU Compiler Collection GCC. When targeting ARM targets, the...

Security Bulletin: Multiple Samba vulnerabilities affect IBM Spectrum Protect Plus (CVE-2018-1139, CVE-2018-1140, CVE-2018-10858, CVE-2018-10918, CVE-2018-10919)

Summary There are multiple security vulnerabilities in Samba that affect IBM Spectrum Protect Plus. These vulnerabilities may result in potential information disclosure, denial of service, or execution of arbitrary code on the system. Vulnerability Details CVEID: CVE-2018-1139 DESCRIPTION: Samba...

Security Bulletin: Multiple vulnerabilities in Oracle Java SE affect IBM Spectrum Protect Plus (CVE-2018-3136, CVE-2018-3139, CVE-2018-3149, CVE-2018-3169, CVE-2018-3180, CVE-2018-3183, CVE-2018-3214, CVE-2018-13785)

Summary There are multiple vulnerabilities in Oracle Java SE which is used by IBM Spectrum Protect™ Plus. These issues were disclosed as part of the Oracle Critical Patch Update CPU in October 2018. Vulnerability Details CVEID: CVE-2018-3136 DESCRIPTION: An unspecified vulnerability in Oracle Jav...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect Operations Center and Client Management Service (CVE-2018-3139, CVE-2018-3180)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ that is used by IBM Spectrum Protect formerly Tivoli Storage Manager Operations Center and IBM Spectrum Protect formerly Tivoli Storage Manager Client Management Service. These issues were disclosed as part of the IBM Ja...

Security Bulletin: Cross-Site Scripting vulnerabilities in IBM Spectrum Protect Operations Center (CVE-2018-1854, CVE-2018-1855)

Summary IBM Spectrum Protect formerly Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting which can result in disclosure of credentials within a trusted session. Vulnerability Details CVEID: CVE-2018-1854 DESCRIPTION: IBM Tivoli Storage Manager Operations Center is...

Security Bulletin: Password disclosure via trace log in IBM Spectrum Protect Operations Center (CVE-2018-1769)

Summary IBM Spectrum Protect formerly Tivoli Storage Manager Operations Center my display the password in plain text in the trace file when tracing is turned on. Vulnerability Details CVEID: CVE-2018-1769 DESCRIPTION: IBM Tivoli Storage Manager Operations Center could disclose sensitive informati...

Description of the security update for SharePoint Foundation 2010: February 12, 2019

Description of the security update for SharePoint Foundation 2010: February 12, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

Description of the security update for SharePoint Enterprise Server 2013: February 12, 2019

None None...

Security Bulletin: IBM Spectrum Protect (formerly Tivoli Storage Manager) Unix Clients are vulnerable to unauthorized access to files by non-privileged users (CVE-2017-1301)

Summary IBM Spectrum Protect formerlyTivoli Storage Manager Unix Clients may use a symbolic link to provide non-privileged users access to files that require root privileges. Vulnerability Details CVEID: CVE-2017-1301 DESCRIPTION: IBM Spectrum Protect could allow a local attacker to launch a...

Security Bulletin: Multiple vulnerabilities in the IBM GSKit component of IBM Spectrum Protect (formerly Tivoli Storage Manager) Client

Summary There are multiple vulnerabilities in the IBM GSKit component of IBM Spectrum Protect formerly Tivoli Storage Manager Client. The IBM Spectrum Protect Client has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-0702 DESCRIPTION: OpenSSL could allow a local attacker to...

Security Bulletin: IBM Spectrum Protect (formerly Tivoli Storage Manager) Client and IBM Spectrum Protect for Virtual Environments allow legacy SSL/TLS protocols and ciphers to be used (CVE-2018-1545)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Client and IBM Spectrum Protect for Virtual Environments formerly Tivoli Storage Manager for Virtual Environments, allow legacy SSL/TLS protocols and ciphers to be used. This can result in the use of weaker than expected cryptograph...

Security Bulletin: Denial of Service vulnerability in IBM Spectrum Protect (formerly Tivoli Storage Manager) Client, IBM Spectrum Protect for Virtual Environments: Data Protection for VMware, and IBM Spectrum Protect for Space Management (CVE-2018-1550)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Client, IBM Spectrum Protect: Data Protection for VMware, and IBM Spectrum Protect for Space Management could allow a local user to corrupt or delete sensitive information that could cause a denial of service. Vulnerability Details...

Security Bulletin: Offline dictionary attack vulnerability in IBM Spectrum Protect (formerly Tivoli Storage Manager) (CVE-2016-8937)

Summary IBM Spectrum Protect formerly Tivoli Storage Manager is vulnerable to an offline dictionary attack due to information disclosed during authentication. An attacker can gain full access to the IBM Spectrum Protect system allowing them to perform operations they may not be authorized to...