Not rated
CVE-2017-1339 IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password
Description
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force ID: 126247.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spectrum Protect | 8.1 | No fix stated |
| Spectrum Protect | 7.1 | No fix stated |
Other CVEs of Spectrum Protect
The 23 CVEs of Spectrum Protect →
CVE-2021-39048
IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds…
6.2
Medium
CVE-2020-4559
IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of…
5.9
Medium
CVE-2020-4415
IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds…
9.8
Critical
CVE-2019-4267
The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow
4.9
Medium