IBM Corporation Tivoli Storage Manager vulnerabilities
5 vulnerabilities
Known vulnerabilities in IBM Corporation Tivoli Storage Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2016-0371ibm corporationtivoli storage manager+1
EPSS score0.34%
The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while application tracing is enabled.CVE-2016-5985ibm corporationtivoli storage manager+1EPSS score0.42%
The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash.CVE-2016-6110ibm corporationtivoli storage manager+2EPSS score0.33%
IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user.CVE-2016-8940ibm corporationtivoli storage manager+1EPSS score0.94%
IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these product specific database tables may allow access to passwords or other sensitive information for the product. IBM Reference #: 1998946.CVE-2016-8998ibm corporationtivoli storage manager+1EPSS score1.70%
IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server. IBM Reference #: 1998747.