10
CVE-2015-1938
- EPSS 5.53%
- Veröffentlicht 30.06.2015 15:59:06
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LoginThe server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2015-1986.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Tivoli Storage Manager Fastback Version6.1.0.0
Ibm ≫ Tivoli Storage Manager Fastback Version6.1.1.0
Ibm ≫ Tivoli Storage Manager Fastback Version6.1.7.2
Ibm ≫ Tivoli Storage Manager Fastback Version6.1.8.0
Ibm ≫ Tivoli Storage Manager Fastback Version6.1.8.1
Ibm ≫ Tivoli Storage Manager Fastback Version6.1.9.0
Ibm ≫ Tivoli Storage Manager Fastback Version6.1.9.1
Ibm ≫ Tivoli Storage Manager Fastback Version6.1.10.0
Ibm ≫ Tivoli Storage Manager Fastback Version6.1.10.1
Ibm ≫ Tivoli Storage Manager Fastback Version6.1.11.0
Ibm ≫ Tivoli Storage Manager Fastback Version6.1.11.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 5.53% | 0.918 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
http://www-01.ibm.com/support/docview.wss?uid=swg21959398
http://www.securitytracker.com/id/1032773
http://www.securityfocus.com/bid/75444
http://www.zerodayinitiative.com/advisories/ZDI-15-272