Non notée
CVE-2016-8940 IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority…
Description
IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these product specific database tables may allow access to passwords or other sensitive information for the product. IBM Reference #: 1998946.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Tivoli Storage Manager | 7.1 | Pas de correctif indiqué |
| Tivoli Storage Manager | 6.4 | Pas de correctif indiqué |
| Tivoli Storage Manager | 6.3 | Pas de correctif indiqué |
| Tivoli Storage Manager | 6.2 | Pas de correctif indiqué |
| Tivoli Storage Manager | 6.1 | Pas de correctif indiqué |
| Tivoli Storage Manager | 6.0 | Pas de correctif indiqué |
| Tivoli Storage Manager 5.5 | 5.5 → 5.5.7 | Pas de correctif indiqué |
| Tivoli Storage Manager 5.4 | 5.4 → 5.4.4.0 | Pas de correctif indiqué |
| Tivoli Storage Manager 5.3 | 5.3 → 5.3.6.9 | Pas de correctif indiqué |
Afficher les 3 autres branches Masquer les 3 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Tivoli Storage Manager 5.2 | 5.2.0 → 5.2.9 | Pas de correctif indiqué |
| Tivoli Storage Manager 5.1 | 5.1.0 → 5.1.10 | Pas de correctif indiqué |
| Tivoli Storage Manager 4.2 | 4.2 → 4.2.4 | Pas de correctif indiqué |
Autres CVE de Tivoli Storage Manager
Les 5 CVE de Tivoli Storage Manager →
CVE-2016-8998
IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a…
Non notée
CVE-2016-6110
IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local…
Non notée
CVE-2016-0371
The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while…
Non notée
CVE-2016-5985
The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based…
Non notée