Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm tivoli storage manager 6.4.2 vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2014-4818
dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4.x, 5.5.x, 6.x prior to 6.4.3, and 7.1.x prior to 7.1.2 allows local users to discover the backup/restore encryption-key password via unspecified vectors.
Ibm Tivoli Storage Manager 6.3.5Ibm Tivoli Storage Manager 6.4Ibm Tivoli Storage Manager 6.4.1Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 7.1Ibm Tivoli Storage Manager 6.3Ibm Tivoli Storage Manager 6.3.4Ibm Tivoli Storage Manager 5.4.0Ibm Tivoli Storage Manager 5.5Ibm Tivoli Storage Manager 6.1Ibm Tivoli Storage Manager 6.2Ibm Tivoli Storage Manager 6.3.3Ibm Tivoli Storage Manager 7.1.1
4.4
CVSSv2
CVE-2016-6043
Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced.
Ibm Tivoli Storage Manager 6.4.2.2Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 7.1.3Ibm Tivoli Storage Manager 7.1.3.2Ibm Tivoli Storage Manager 6.4.2.4Ibm Tivoli Storage Manager 6.4.2.3Ibm Tivoli Storage Manager 7.1.1.1Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1.0.2Ibm Tivoli Storage Manager 7.1Ibm Tivoli Storage Manager 6.4.1Ibm Tivoli Storage Manager 7.1.7Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 6.4.2.1Ibm Tivoli Storage Manager 6.4.1.1Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 7.1.1.2
3.5
CVSSv2
CVE-2016-6046
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ibm Tivoli Storage Manager 6.4.2.4Ibm Tivoli Storage Manager 6.4.2.3Ibm Tivoli Storage Manager 7.1.1.2Ibm Tivoli Storage Manager 7.1.1.1Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1.0.2Ibm Tivoli Storage Manager 6.4.2.2Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 7.1.3Ibm Tivoli Storage Manager 7.1.3.2Ibm Tivoli Storage Manager 7.1Ibm Tivoli Storage Manager 6.4.1Ibm Tivoli Storage Manager 7.1.7Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 6.4.2.1Ibm Tivoli Storage Manager 6.4.1.1Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.3.1
6.8
CVSSv2
CVE-2016-6045
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an malicious user to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Ibm Tivoli Storage Manager 6.4.2.3Ibm Tivoli Storage Manager 6.4.2.2Ibm Tivoli Storage Manager 6.4.2.1Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 7.1Ibm Tivoli Storage Manager 6.4.1Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.3.2Ibm Tivoli Storage Manager 7.1.1.1Ibm Tivoli Storage Manager 7.1.0.2Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.3Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 6.4.2.4Ibm Tivoli Storage Manager 6.4.1.1Ibm Tivoli Storage Manager 7.1.7Ibm Tivoli Storage Manager 7.1.1.2Ibm Tivoli Storage Manager 7.1.0.1
4
CVSSv2
CVE-2016-6044
IBM Tivoli Storage Manager Operations Center could allow an authenticated malicious user to enable or disable the application's REST API, which may let the attacker violate security policy.
Ibm Tivoli Storage Manager 6.4.2.3Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.0.2Ibm Tivoli Storage Manager 6.4.2.1Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 6.4.1.1Ibm Tivoli Storage Manager 6.4.1Ibm Tivoli Storage Manager 7.1.7Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 7.1.3.2Ibm Tivoli Storage Manager 7.1.1.2Ibm Tivoli Storage Manager 7.1.1.1Ibm Tivoli Storage Manager 6.4.2.4Ibm Tivoli Storage Manager 6.4.2.2Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 7.1.3Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1
7.2
CVSSv2
CVE-2014-6185
dsmtca in the client in IBM Tivoli Storage Manager (TSM) 6.3 prior to 6.3.2.3, 6.4 prior to 6.4.2.2, and 7.1 prior to 7.1.1.3 does not properly restrict shared-library loading, which allows local users to gain privileges via a crafted DSO file.
Ibm Tivoli Storage Manager 6.4.0Ibm Tivoli Storage Manager 6.4.0.1Ibm Tivoli Storage Manager 6.4.0.4Ibm Tivoli Storage Manager 6.4.2.1Ibm Tivoli Storage Manager 7.1.0Ibm Tivoli Storage Manager 6.3.0.15Ibm Tivoli Storage Manager 6.3.1.2Ibm Tivoli Storage Manager 6.4.1Ibm Tivoli Storage Manager 6.4.1.3Ibm Tivoli Storage Manager 7.1.0.3Ibm Tivoli Storage Manager 7.1.1Ibm Tivoli Storage Manager 6.3.0Ibm Tivoli Storage Manager 6.3.0.5Ibm Tivoli Storage Manager 6.4.0.5Ibm Tivoli Storage Manager 6.4.0.7Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1.0.2Ibm Tivoli Storage Manager 6.3.2.1Ibm Tivoli Storage Manager 6.3.2.2Ibm Tivoli Storage Manager 6.4.1.7Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 7.1.1.1
2.1
CVSSv2
CVE-2016-8916
IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set password command is issued. IBM X-Force ID: 118472.
Ibm Tivoli Storage Manager 6.4.1.0Ibm Tivoli Storage Manager 6.4.2.500Ibm Tivoli Storage Manager 6.4.3Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1.0.3Ibm Tivoli Storage Manager 7.1.3Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.5.200Ibm Tivoli Storage Manager 7.1.6.2Ibm Tivoli Storage Manager 7.1.6.3Ibm Tivoli Storage Manager 7.1.6.4Ibm Tivoli Storage Manager 7.1Ibm Tivoli Storage Manager 7.1.3.2Ibm Tivoli Storage Manager 7.1.3.100Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 6.4.1Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 6.4.2.100Ibm Tivoli Storage Manager 6.4.2.200Ibm Tivoli Storage Manager 7.1.1.1
2.1
CVSSv2
CVE-2017-1378
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875.
Ibm Tivoli Storage Manager 8.1.0.2Ibm Tivoli Storage Manager 7.1.6.5Ibm Tivoli Storage Manager 6.1Ibm Tivoli Storage Manager 6.1.0Ibm Tivoli Storage Manager 6.1.1Ibm Tivoli Storage Manager 6.3.0.5Ibm Tivoli Storage Manager 6.3.0.15Ibm Tivoli Storage Manager 6.3.0.17Ibm Tivoli Storage Manager 6.3.1Ibm Tivoli Storage Manager 6.4.2.200Ibm Tivoli Storage Manager 6.4.2.500Ibm Tivoli Storage Manager 6.4.2.600Ibm Tivoli Storage Manager 6.4.3Ibm Tivoli Storage Manager 6.4.3.1Ibm Tivoli Storage Manager 7.1.3.000Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 7.1.3.2Ibm Tivoli Storage Manager 7.1.3.100Ibm Tivoli Storage Manager 6.1.5.4Ibm Tivoli Storage Manager 6.1.5.5Ibm Tivoli Storage Manager 6.1.5.6Ibm Tivoli Storage Manager 6.2.0
3.6
CVSSv2
CVE-2017-1301
IBM Spectrum Protect 7.1 and 8.1 could allow a local malicious user to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to va...
Ibm Tivoli Storage Manager 6.1.0Ibm Tivoli Storage Manager 6.1.1Ibm Tivoli Storage Manager 6.1.2Ibm Tivoli Storage Manager 6.1.3Ibm Tivoli Storage Manager 6.1.4Ibm Tivoli Storage Manager 6.3.0.17Ibm Tivoli Storage Manager 6.3.1Ibm Tivoli Storage Manager 6.3.1.2Ibm Tivoli Storage Manager 6.3.2.2Ibm Tivoli Storage Manager 6.4.3Ibm Tivoli Storage Manager 6.4.3.1Ibm Tivoli Storage Manager 7.1Ibm Tivoli Storage Manager 7.1..5.100Ibm Tivoli Storage Manager 7.1.3.100Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.6.6Ibm Tivoli Storage Manager 6.1.5Ibm Tivoli Storage Manager 6.1.5.5Ibm Tivoli Storage Manager 6.3Ibm Tivoli Storage Manager 6.3.0.15
5
CVSSv2
CVE-2016-8937
The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server. IBM X-Forc...
Ibm Tivoli Storage Manager 6.1.2Ibm Tivoli Storage Manager 6.1.3Ibm Tivoli Storage Manager 6.1.4Ibm Tivoli Storage Manager 6.1.5Ibm Tivoli Storage Manager 6.3.1Ibm Tivoli Storage Manager 6.3.1.2Ibm Tivoli Storage Manager 6.3.2.2Ibm Tivoli Storage Manager 6.3.3Ibm Tivoli Storage Manager 6.4.3.1Ibm Tivoli Storage Manager 7.1Ibm Tivoli Storage Manager 7.1..5.100Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.5Ibm Tivoli Storage Manager 6.1.0Ibm Tivoli Storage Manager 6.1.5.5Ibm Tivoli Storage Manager 6.2.0Ibm Tivoli Storage Manager 6.3Ibm Tivoli Storage Manager 6.3.0.15Ibm Tivoli Storage Manager 6.3.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook