Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.200:*:*:*:*:*:*:*

part: a version: 6.4.2.200 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTivoli Storage Manager (1bb99743-5532-54e2-bfa8-04d6161687cb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1378 vulnerable 2026-06-08 05:09:21.967119 Details available
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875.
Published: 2017-10-05T17:00:00.000Z
Updated: 2024-09-17T01:46:09.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1339 vulnerable 2026-06-08 05:09:21.797719 Details available
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force ID: 126247.
Published: 2017-10-05T17:00:00.000Z
Updated: 2024-09-16T17:34:11.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1301 vulnerable 2026-06-08 05:09:21.662094 Details available
IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the system, which could allow the attacker to overwrite arbitrary files on the system with elevated privileges. IBM X-Force ID: 125163.
Published: 2017-10-05T17:00:00.000Z
Updated: 2024-09-17T01:56:53.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8939 vulnerable 2026-06-08 05:08:22.193041 Details available
IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790.
Published: 2017-06-07T17:00:00.000Z
Updated: 2024-08-06T02:35:02.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8937 vulnerable 2026-06-08 05:08:22.161649 Details available
The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server. IBM X-Force ID: 118750.
Published: 2017-10-05T17:00:00.000Z
Updated: 2024-09-16T16:53:53.088Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8916 vulnerable 2026-06-08 05:08:22.040093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2894 vulnerable 2026-06-08 05:07:43.676628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.