Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

ibm tivoli storage manager vulnerabilities and exploits

(subscribe to this query)
4.4
CVSSv3

CVE-2017-1339

IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of ser...
Ibm Tivoli Storage Manager 7.1.7.100Ibm Tivoli Storage Manager 6.3.6.100Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1.7.200Ibm Tivoli Storage Manager 7.1.5Ibm Tivoli Storage Manager 6.4.2.100Ibm Tivoli Storage Manager 6.3Ibm Tivoli Storage Manager 6.1Ibm Tivoli Storage Manager 7.1.7Ibm Tivoli Storage Manager 6.1.5.5Ibm Tivoli Storage Manager 6.3.5.1Ibm Tivoli Storage Manager 7.1.0.2Ibm Tivoli Storage Manager 6.1.5.6Ibm Tivoli Storage Manager 6.4.2.500Ibm Tivoli Storage Manager 6.4.3.1Ibm Tivoli Storage Manager 6.1.3Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 6.4.3Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 6.1.5.4Ibm Tivoli Storage Manager 6.3.1
7.8
CVSSv3

CVE-2017-1378

IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875.
Ibm Tivoli Storage Manager 6.3.6.100Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1.5Ibm Tivoli Storage Manager 6.4.2.100Ibm Tivoli Storage Manager 6.3Ibm Tivoli Storage Manager 6.1Ibm Tivoli Storage Manager 6.1.5.5Ibm Tivoli Storage Manager 6.3.5.1Ibm Tivoli Storage Manager 7.1.0.2Ibm Tivoli Storage Manager 6.1.5.6Ibm Tivoli Storage Manager 6.4.2.500Ibm Tivoli Storage Manager 6.4.3.1Ibm Tivoli Storage Manager 6.1.3Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 6.4.3Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 6.1.5.4Ibm Tivoli Storage Manager 6.3.1Ibm Tivoli Storage Manager 6.3.0.15Ibm Tivoli Storage Manager 6.3.1.2Ibm Tivoli Storage Manager 6.3.5
5.5
CVSSv3

CVE-2016-8939

IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790.
Ibm Tivoli Storage Manager 7.1.7.100Ibm Tivoli Storage Manager 6.3.6.100Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1.7.200Ibm Tivoli Storage Manager 7.1.5Ibm Tivoli Storage Manager 6.4.2.100Ibm Tivoli Storage Manager 6.3Ibm Tivoli Storage Manager 6.1Ibm Tivoli Storage Manager 7.1.7Ibm Tivoli Storage Manager 6.1.5.5Ibm Tivoli Storage Manager 6.3.5.1Ibm Tivoli Storage Manager 7.1.0.2Ibm Tivoli Storage Manager 6.1.5.6Ibm Tivoli Storage Manager 6.4.2.500Ibm Tivoli Storage Manager 6.4.3.1Ibm Tivoli Storage Manager 6.1.3Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 6.4.3Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 6.1.5.4Ibm Tivoli Storage Manager 6.3.1
5.5
CVSSv3

CVE-2016-8916

IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set password command is issued. IBM X-Force ID: 118472.
Ibm Tivoli Storage Manager 6.4.2Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1.5Ibm Tivoli Storage Manager 6.4.2.100Ibm Tivoli Storage Manager 7.1.0.2Ibm Tivoli Storage Manager 7.1.6.4Ibm Tivoli Storage Manager 6.4.2.500Ibm Tivoli Storage Manager 6.4.3.1Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 6.4.3Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.6.2Ibm Tivoli Storage Manager 7.1.0.3Ibm Tivoli Storage Manager 7.1.1.1Ibm Tivoli Storage Manager 6.4.0.0Ibm Tivoli Storage Manager 6.4.2.600Ibm Tivoli Storage Manager 7.1.3.000Ibm Tivoli Storage Manager 7.1.1.200Ibm Tivoli Storage Manager 7.1.1Ibm Tivoli Storage Manager 7.1..5.100Ibm Tivoli Storage Manager 7.1.3.2
8.8
CVSSv3

CVE-2016-8940

IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. Th...
Ibm Tivoli Storage Manager 7.1.0.1Ibm Tivoli Storage Manager 7.1.5Ibm Tivoli Storage Manager 6.3Ibm Tivoli Storage Manager 6.1Ibm Tivoli Storage Manager 7.1.7Ibm Tivoli Storage Manager 6.1.5.5Ibm Tivoli Storage Manager 6.3.5.1Ibm Tivoli Storage Manager 7.1.0.2Ibm Tivoli Storage Manager 6.1.5.6Ibm Tivoli Storage Manager 6.1.3Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 6.1.5.4Ibm Tivoli Storage Manager 6.3.1Ibm Tivoli Storage Manager 6.3.0.15Ibm Tivoli Storage Manager 6.3.1.2Ibm Tivoli Storage Manager 6.3.5Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.0.3Ibm Tivoli Storage Manager 6.3.0.17Ibm Tivoli Storage Manager 7.1.1.1Ibm Tivoli Storage Manager 6.1.4
7.2
CVSSv3

CVE-2016-8998

IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server. IBM Reference #: 1998747.
Ibm Tivoli Storage Manager 7.1.5Ibm Tivoli Storage Manager 7.1.7Ibm Tivoli Storage Manager 7.1.3.1Ibm Tivoli Storage Manager 7.1.4Ibm Tivoli Storage Manager 7.1.4.2Ibm Tivoli Storage Manager 7.1.1.1Ibm Tivoli Storage Manager 7.1.3.000Ibm Tivoli Storage Manager 7.1.1.200Ibm Tivoli Storage Manager 7.1.1Ibm Tivoli Storage Manager 7.1.3.2Ibm Tivoli Storage Manager 7.1.4.1Ibm Tivoli Storage Manager 7.1.1.100Ibm Tivoli Storage Manager 7.1.3Ibm Tivoli Storage Manager 7.1.1.300Ibm Tivoli Storage Manager 7.1.5.200Ibm Tivoli Storage Manager 7.1.1.2Ibm Tivoli Storage Manager 7.1.3.100
8.8
CVSSv3

CVE-2016-6033

IBM Tivoli Storage Manager for Virtual Environments 7.1 (VMware) is vulnerable to cross-site request forgery which could allow an malicious user to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 1995545.
Ibm Tivoli Storage Manager For Virtual Environments Data Protection For Vmware 7.1.0Ibm Tivoli Storage Manager For Virtual Environments Data Protection For Vmware 7.1.1Ibm Tivoli Storage Manager For Virtual Environments Data Protection For Vmware 7.1.2Ibm Tivoli Storage Manager For Virtual Environments Data Protection For Vmware 7.1.3Ibm Tivoli Storage Manager For Virtual Environments Data Protection For Vmware 7.1.4Ibm Tivoli Storage Manager For Virtual Environments Data Protection For Vmware 7.1.4.0Ibm Tivoli Storage Manager For Virtual Environments Data Protection For Vmware 7.1.6Ibm Tivoli Storage Manager For Virtual Environments Data Protection For Vmware 7.1.6.2Ibm Tivoli Storage Manager For Virtual Environments Data Protection For Vmware 7.1.6.3Ibm Tivoli Storage Flashcopy Manager For Vmware 4.1.0.0Ibm Tivoli Storage Flashcopy Manager For Vmware 4.1.1Ibm Tivoli Storage Flashcopy Manager For Vmware 4.1.2Ibm Tivoli Storage Flashcopy Manager For Vmware 4.1.3Ibm Tivoli Storage Flashcopy Manager For Vmware 4.1.4Ibm Tivoli Storage Flashcopy Manager For Vmware 4.1.4.0Ibm Tivoli Storage Flashcopy Manager For Vmware 4.1.4.1Ibm Tivoli Storage Flashcopy Manager For Vmware 4.1.6Ibm Tivoli Storage Flashcopy Manager For Vmware 4.1.6.0
7.3
CVSSv3

CVE-2016-5934

IBM Tivoli Storage Manager FastBack installer could allow a remote malicious user to execute arbitrary code on the system. By placing a specially-crafted DLL in the victim's path, an attacker could exploit this vulnerability when the installer is executed to run arbitrary co...
Ibm Tivoli Storage Manager Fastback
4.7
CVSSv3

CVE-2016-5918

IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the password access option is prompt and the password is changed.
Ibm Tivoli Storage Manager For Space ManagementIbm Tivoli Storage Manager For Space Management 7.1.0.0Ibm Tivoli Storage Manager For Space Management 6.4.0.0
6.5
CVSSv3

CVE-2016-6110

IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user.
Ibm Tivoli Storage ManagerIbm Tivoli Storage Manager 7.1.0.0Ibm Tivoli Storage Manager For Virtual Environments Data Protection For VmwareIbm Tivoli Storage Manager For Virtual Environments Data Protection For Vmware 7.1.0.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37884CVE-2024-6003remotebrute forceinformation disclosureCVE-2024-27801CVE-2024-30078CVE-2024-31870CVE-2024-6042
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook