4.7
Medium
CVE-2019-4072 IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to…
Description
IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even when a user has logged out. Utilizing the application back button users can remain logged in as the current user for a short period of time, therefore users are presented with information for Spectrum Control Application. IBM X-Force ID: 157064.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spectrum Control Standard Edition 5.2 | 5.2.1 → 5.2.17.1 | No fix stated |
Other CVEs of Spectrum Control Standard Edition
The 4 CVEs of Spectrum Control Standard Edition →
CVE-2019-4137
IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site scripting
6.1
Medium
CVE-2019-4138
IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive…
5.9
Medium
CVE-2019-4071
IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote…
6.8
Medium