GCVE - cpe:2.3:a:ibm:tivoli_storage_manager:8.1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_storage_manager:8.1.0:*:*:*:*:*:*:*

part: a version: 8.1.0 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Tivoli Storage Manager (`1bb99743-5532-54e2-bfa8-04d6161687cb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-1378`	vulnerable	2026-06-08 05:09:21.976546	Details available IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875. Published: 2017-10-05T17:00:00.000Z Updated: 2024-09-17T01:46:09.210Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/126875 http://www.ibm.com/support/docview.wss?uid=swg22006215	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1339`	vulnerable	2026-06-08 05:09:21.804920	Details available IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force ID: 126247. Published: 2017-10-05T17:00:00.000Z Updated: 2024-09-16T17:34:11.313Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/101113 http://www.ibm.com/support/docview.wss?uid=swg22007936 http://www.securitytracker.com/id/1039498 https://exchange.xforce.ibmcloud.com/vulnerabilities/126247	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1301`	vulnerable	2026-06-08 05:09:21.678182	Details available IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the system, which could allow the attacker to overwrite arbitrary files on the system with elevated privileges. IBM X-Force ID: 125163. Published: 2017-10-05T17:00:00.000Z Updated: 2024-09-17T01:56:53.219Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg22006248 http://www.securityfocus.com/bid/101107 https://exchange.xforce.ibmcloud.com/vulnerabilities/125163	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8939`	vulnerable	2026-06-08 05:08:22.193571	Details available IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790. Published: 2017-06-07T17:00:00.000Z Updated: 2024-08-06T02:35:02.305Z Open on db.gcve.eu Reference links https://improsec.com/blog/vulnerability-in-tsm http://www.securitytracker.com/id/1038607 http://www.securityfocus.com/bid/98783 http://www.ibm.com/support/docview.wss?uid=swg22003738 https://exchange.xforce.ibmcloud.com/vulnerabilities/118790	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8937`	vulnerable	2026-06-08 05:08:22.167050	Details available The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server. IBM X-Force ID: 118750. Published: 2017-10-05T17:00:00.000Z Updated: 2024-09-16T16:53:53.088Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/118750 http://www.ibm.com/support/docview.wss?uid=swg22007935	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.