Lucene search

K
IbmTivoli Storage Manager7.1.7

9 matches found

CVE
CVE
added 2017/10/05 5:29 p.m.53 views

CVE-2017-1339

IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force I...

4.4CVSS4.6AI score0.00021EPSS
CVE
CVE
added 2017/10/05 5:29 p.m.49 views

CVE-2016-8937

The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server. IBM X-Force ID: 118750.

9.8CVSS9.1AI score0.00232EPSS
CVE
CVE
added 2017/02/01 8:59 p.m.46 views

CVE-2016-6045

IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

8.8CVSS8.6AI score0.00151EPSS
CVE
CVE
added 2017/02/01 8:59 p.m.45 views

CVE-2016-6046

IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

5.4CVSS5.6AI score0.00227EPSS
CVE
CVE
added 2017/02/01 8:59 p.m.44 views

CVE-2016-6044

IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security policy.

4.3CVSS5.1AI score0.00125EPSS
CVE
CVE
added 2017/06/07 5:29 p.m.43 views

CVE-2016-8939

IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790.

5.5CVSS5.2AI score0.00074EPSS
CVE
CVE
added 2017/02/01 8:59 p.m.39 views

CVE-2016-6043

Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced.

7CVSS7.1AI score0.00048EPSS
CVE
CVE
added 2017/03/07 5:59 p.m.36 views

CVE-2016-8940

IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these p...

8.8CVSS8.6AI score0.00318EPSS
CVE
CVE
added 2017/02/24 6:59 p.m.33 views

CVE-2016-8998

IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server. IBM Reference #: 1998747.

7.2CVSS7.3AI score0.01867EPSS