CVE-2016-5947

IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 is affected by a clickjacking vulnerability that can be exploited by a remote, authenticated user via a crafted web site. The issue affects IBM Spectrum Control / Tivoli Storage Productivity Center 5.2.8–5.2.10...

CVE-2016-5943

IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 contains an access-control flaw that lets an authenticated user bypass restrictions and read task details or edit properties. Affected are IBM Spectrum Control versions 5.2.8–5.2.10.1 and Tivoli Storage Product...

CVE-2016-5946: Exposure of Sensitive Information to an Unauthorized Actor

Directory traversal vulnerability in IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. dot dot in a URL...

CVE-2016-5944: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web UI in IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string...

CVE-2016-5943: Improper Access Control

IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properties, via unspecified vectors...

CVE-2016-5947: Improper Input Validation

IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

PT-2016-6730

Name of the Vulnerable Software and Affected Versions IBM Spectrum Control versions 5.2.x before 5.2.11 Description The issue allows remote authenticated users to read arbitrary files by utilizing a directory traversal technique, specifically through the use of a .. dot dot in a URL...

PT-2016-6728

Name of the Vulnerable Software and Affected Versions IBM Spectrum Control versions 5.2.x through 5.2.10 Description A cross-site scripting XSS issue exists in the Web UI, allowing remote authenticated users to inject arbitrary web script or HTML via an embedded string. This could potentially lea...

PT-2016-6727

Name of the Vulnerable Software and Affected Versions IBM Spectrum Control formerly Tivoli Storage Productivity Center versions 5.2.x before 5.2.11 Description The issue allows remote authenticated users to bypass intended access restrictions. This enables them to read task details or edit...

PT-2016-6731

Name of the Vulnerable Software and Affected Versions IBM Spectrum Control formerly Tivoli Storage Productivity Center versions 5.2.x before 5.2.11 Description The issue allows remote authenticated users to conduct clickjacking attacks via a crafted web site. Recommendations For versions 5.2.x...

PT-2016-6729

Name of the Vulnerable Software and Affected Versions IBM Spectrum Control formerly Tivoli Storage Productivity Center versions 5.2.x before 5.2.11 Description The issue allows remote authenticated users to upload non-executable files via a crafted HTTP request. Recommendations For versions 5.2.x...

CVE-2016-5945: Improper Access Control

IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to upload non-executable files via a crafted HTTP request...

IBM Spectrum Control and IBM Storage Insights Catalog Traversal Vulnerability

IBM Spectrum Control and IBM Storage Insights are both storage resource management software from IBM USA. A directory traversal vulnerability exists in IBM Spectrum Control versions 5.2.8 through 5.2.10.1 and IBM Storage Insights. An attacker can exploit this vulnerability by sending a URL reques...

IBM Spectrum Control and IBM Storage Insights Cross-Site Scripting Vulnerabilities

IBM Spectrum Control and IBM Storage Insights are both storage resource management software from IBM USA. A cross-site scripting vulnerability exists in IBM Spectrum Control versions 5.2.8 through 5.2.10.1 and IBM Storage Insights. An attacker can exploit this vulnerability to inject arbitrary...

IBM Spectrum Control and IBM Storage Insights Arbitrary File Upload Vulnerability

IBM Spectrum Control and IBM Storage Insights are both storage resource management software from IBM USA. An arbitrary file upload vulnerability exists in IBM Spectrum Control versions 5.2.8 through 5.2.10.1 and IBM Storage Insights. An attacker could exploit this vulnerability by sending a...

IBM Spectrum Control and IBM Storage Insights Clickjacking Vulnerability

IBM Spectrum Control and IBM Storage Insights are both storage resource management software from IBM USA. A clickjacking vulnerability exists in IBM Spectrum Control versions 5.2.8 through 5.2.10.1 and IBM Storage Insights. A remote attacker could exploit this vulnerability by convincing a user t...

IBM Spectrum Control and IBM Storage Insights Security Bypass Vulnerabilities

IBM Spectrum Control and IBM Storage Insights are both storage resource management software from IBM USA. A security bypass vulnerability exists in IBM Spectrum Control versions 5.2.8 through 5.2.10.1 and IBM Storage Insights. An attacker could exploit the vulnerability to edit restricted propert...

Input validation

IBM Tivoli Storage Manager for Space Management aka Spectrum Protect for Space Management 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output...

CVE-2016-5927

CVE-2016-5927 affects IBM Tivoli Storage Manager for Space Management (Spectrum Protect for Space Management) versions 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6. The root cause is that enabling application tracing for the dsmsetpw command can cause the trace output to rev...

MIT Researchers Solve the Spectrum Crunch to make Wi-Fi 10 times Faster

While using your cell phone at a massive public event, like a concert, conference, or sporting event, you have probably experienced slow communication, poor performance or slow browsing speeds, as crowds arrive. That's because of ‘Spectrum Crunch’, which means, Interference of WiFi signals with...