Ibm

Tivoli Storage Manager

49 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2016-8998

  • EPSS 1.87%
  • Published 24.02.2017 18:59:00
  • Last modified 20.04.2025 01:37:25

IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server. IBM Reference #: 1998747.

6.5

CVE-2016-6110

  • EPSS 0.05%
  • Published 01.02.2017 22:59:00
  • Last modified 20.04.2025 01:37:25

IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user.

5.5

CVE-2016-0371

  • EPSS 0.12%
  • Published 01.02.2017 21:59:00
  • Last modified 20.04.2025 01:37:25

The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while application tracing is enabled.

5.4

CVE-2016-6046

  • EPSS 0.23%
  • Published 01.02.2017 20:59:01
  • Last modified 20.04.2025 01:37:25

IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosur...

8.8

CVE-2016-6045

  • EPSS 0.15%
  • Published 01.02.2017 20:59:01
  • Last modified 20.04.2025 01:37:25

IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

4.3

CVE-2016-6044

  • EPSS 0.13%
  • Published 01.02.2017 20:59:01
  • Last modified 20.04.2025 01:37:25

IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security policy.

7

CVE-2016-6043

  • EPSS 0.05%
  • Published 01.02.2017 20:59:01
  • Last modified 20.04.2025 01:37:25

Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced.

7.8

CVE-2016-5985

  • EPSS 0.07%
  • Published 01.02.2017 20:59:01
  • Last modified 20.04.2025 01:37:25

The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash.

2.5

CVE-2016-2894

  • EPSS 0.06%
  • Published 03.07.2016 21:59:14
  • Last modified 12.04.2025 10:46:40

IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging...

3.7

CVE-2015-7408

  • EPSS 0.2%
  • Published 15.02.2016 02:59:10
  • Last modified 12.04.2025 10:46:40

The server in IBM Spectrum Protect (aka Tivoli Storage Manager) 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which allows remote attackers to read or write to backup data by leveraging proxy...