4256 matches found
Security Bulletin: Vulnerability in OpenSSL affects IBM Spectrum Protect Backup-Archive Client NetApp Services (CVE-2019-1559)
Summary An OpenSSL vulnerability was disclosed on February 26, 2019 by the OpenSSL Project. OpenSSL, used by the IBM Spectrum Protect formerly Tivoli Storage Manager Backup-Archive Client for network connections with NetApp services, has addressed the applicable CVE. Vulnerability Details CVEID:...
Security Bulletin: Spoofing and denial of service vulnerabilities in WebSphere Application Server Liberty affect IBM Spectrum Protect Client web user interface and IBM Spectrum Protect for Virtual Environments (CVE-2018-1902, CVE-2019-4046)
Summary Potential spoofing and denial of service vulnerabilities in IBM WebSphere Application Server Liberty affect IBM Spectrum Protect formerly Tivoli Storage Manager Backup-Archive Client web user interface and IBM Spectrum Protect formerly Tivoli Storage Manager for Virtual Environments...
IBM Spectrum Protect 7.1.x < 7.1.9.300 / 8.1.x < 8.1.8 Multiple Vulnerabilities
IBM Spectrum Protect, formerly known as Tivoli Storage Manager, installed on the remote host is version 7.1.x 7.1.9.300 or 8.1.x 8.1.8. It is, therefore, affected by multiple IBM Db2 remote code execution and privilege escalation vulnerabilities. These vulnerabilities could allow an attacker to...
CVE-2019-4267
The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow. This could allow execution of arbitrary code on the local system or the application to crash. IBM X-Force ID: 160200...
CVE-2019-4236
A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List ACL entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to...
CVE-2019-4267
The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow. This could allow execution of arbitrary code on the local system or the application to crash. IBM X-Force ID: 160200...
Buffer overflow
The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow. This could allow execution of arbitrary code on the local system or the application to crash. IBM X-Force ID: 160200...
Code injection
A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List ACL entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to...
CVE-2019-4267
The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow. This could allow execution of arbitrary code on the local system or the application to crash. IBM X-Force ID: 160200...
CVE-2019-4267
CVE-2019-4267 affects IBM Spectrum Protect (Backup-Archive Client) versions 7.1.0.0–7.1.8.5 and 8.1.0.0–8.1.7.1, where a buffer overflow could allow arbitrary code execution or crash the application. The IBM Security Bulletin lists this as a vulnerability in the Backup-Archive Client with a CVSSv...
CVE-2019-4236
CVE-2019-4236 affects IBM Spectrum Protect Backup-Archive Client on HP-UX with VxFS: when an object has more than twelve ACL entries, backup/archive operations may silently skip ACL entries, risking restoration/retrieval with incorrect ACLs. Affected: Spectrum Protect 7.1.x on HP-UX IA64 (7.1.0.0...
CVE-2019-4236
A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List ACL entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to...
PT-2019-17006 · Ibm · Ibm Spectrum Protect
Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect versions 7.1 through 8.1 Description: The issue concerns a buffer overflow that could potentially allow the execution of arbitrary code on the local system or cause the application to crash. Recommendations: For versions...
CVE-2019-4236: Undefined Security Weakness
A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List ACL entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to...
CVE-2019-4267: Improper Restriction of Operations within the Bounds of a Memory Buffer
The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow. This could allow execution of arbitrary code on the local system or the application to crash. IBM X-Force ID: 160200...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect for Virtual Environments (CVE-2018-12547, CVE-2019-2426)
Summary Multiple vulnerabilities in IBM® Runtime Environment Java™ were disclosed as part of the IBM Java SDK updates in January 2019. IBM® Runtime Environment Java™ is used by IBM Spectrum Protect formerly Tivoli Storage Manager for Virtual Environments. Vulnerability Details CVEID: CVE-2018-125...
Security Bulletin: A vulnerability in IBM WebSphere Application Server affects IBM Spectrum Scale packaged in IBM Elastic Storage Server (CVE-2019-4046)
Summary There is a vulnerability in IBM WebSphere Application Server, used by IBM Spectrum Scale. This issue allows a remote attacker to cause a denial of service condition. Vulnerability Details CVEID: CVE-2019-4046 DESCRIPTION: IBM WebSphere Application Server is vulnerable to a denial of...
CVE-2019-10933
A vulnerability has been identified in Spectrum Power 3 Corporate User Interface All versions = v3.11, Spectrum Power 4 Corporate User Interface Version v4.75, Spectrum Power 5 Corporate User Interface All versions v5.50, Spectrum Power 7 Corporate User Interface All versions = v2.20. The web...
CVE-2019-10933
A vulnerability has been identified in Spectrum Power 3 Corporate User Interface All versions = v3.11, Spectrum Power 4 Corporate User Interface Version v4.75, Spectrum Power 5 Corporate User Interface All versions v5.50, Spectrum Power 7 Corporate User Interface All versions = v2.20. The web...
Cross site scripting
A vulnerability has been identified in Spectrum Power 3 Corporate User Interface All versions = v3.11, Spectrum Power 4 Corporate User Interface Version v4.75, Spectrum Power 5 Corporate User Interface All versions v5.50, Spectrum Power 7 Corporate User Interface All versions = v2.20. The web...