IBM Tivoli Storage Manager Operations Center 缓冲区错误漏洞

A buffer overflow vulnerability exists in IBM Tivoli Storage Manager Operations Center, a next-generation simplified backup management solution from IBM USA, which can be exploited in The vulnerability can be exploited in "interactive" mode and cannot be exploited in batch or command line use due...

IBM Tivoli Storage Manager Operations Center Cross-Site Scripting Vulnerability (CNVD-2019-05661)

IBM Tivoli Storage Manager Operations Center is a next-generation simplified backup management solution from IBM USA. The product provides a centralized view of backup issues for multiple TSM servers and extended DB2 databases, among other features. A cross-site scripting vulnerability exists in...

Security Bulletin: Multiple security vulnerabilities in IBM WebSphere Application Server Liberty affect Tivoli Storage Manager (IBM Spectrum Protect) Operations Center (CVE-2016-0378, CVE-2016-3040, CVE-2016-3042, CVE-2016-5986)

Summary Multiple security vulnerabilities exist in IBM WebSphere Application Server Liberty that affect Tivoli Storage Manager IBM Spectrum Protect Operations Center. Vulnerability Details CVEID: CVE-2016-0378 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote attacker to...

Security Bulletin: Vulnerability in IBM Java Runtime affects Tivoli Storage Manager Operations Center and Tivoli Storage Manager Client Management Service (CVE-2015-7575)

Summary There is a vulnerability in IBM® Runtime Environment Java™ Technology Edition, Version 8.0.2.1 that is used by Tivoli Storage Manager Operations Center and Tivoli Storage Manager Client Management Service. This vulnerability, commonly referred to as “SLOTH”, was disclosed as part of the I...

CVE-2016-6046: Improper Neutralization of Input During Web Page Generation

IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-6045: Cross-Site Request Forgery (CSRF)

IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2016-6043: Session Fixation

Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced...

PT-2017-8865

Name of the Vulnerable Software and Affected Versions Tivoli Storage Manager Operations Center affected versions not specified Description The issue allows a local user to take over a previously logged in user due to session expiration not being enforced. Recommendations At the moment, there is n...

PT-2017-8866

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager Operations Center affected versions not specified Description The issue allows an authenticated attacker to enable or disable the application's REST API, potentially violating security policy. Recommendations At the...

PT-2017-8867

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager Operations Center affected versions not specified Description The issue allows an attacker to execute malicious and unauthorized actions by exploiting a cross-site request forgery weakness. This could happen when the...

PT-2017-8868

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager Operations Center affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

CVE-2016-6044: Improper Access Control

IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security policy...