Not rated
CVE-2016-8940 IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority…
Description
IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these product specific database tables may allow access to passwords or other sensitive information for the product. IBM Reference #: 1998946.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tivoli Storage Manager | 7.1 | No fix stated |
| Tivoli Storage Manager | 6.4 | No fix stated |
| Tivoli Storage Manager | 6.3 | No fix stated |
| Tivoli Storage Manager | 6.2 | No fix stated |
| Tivoli Storage Manager | 6.1 | No fix stated |
| Tivoli Storage Manager | 6.0 | No fix stated |
| Tivoli Storage Manager 5.5 | 5.5 → 5.5.7 | No fix stated |
| Tivoli Storage Manager 5.4 | 5.4 → 5.4.4.0 | No fix stated |
| Tivoli Storage Manager 5.3 | 5.3 → 5.3.6.9 | No fix stated |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Tivoli Storage Manager 5.2 | 5.2.0 → 5.2.9 | No fix stated |
| Tivoli Storage Manager 5.1 | 5.1.0 → 5.1.10 | No fix stated |
| Tivoli Storage Manager 4.2 | 4.2 → 4.2.4 | No fix stated |
Other CVEs of Tivoli Storage Manager
The 5 CVEs of Tivoli Storage Manager →
CVE-2016-8998
IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a…
Not rated
CVE-2016-6110
IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local…
Not rated
CVE-2016-0371
The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while…
Not rated
CVE-2016-5985
The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based…
Not rated