Tivoli Storage Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:tivoli_storage_manager:6.3.3:*:*:*:*:*:*:*
part: a version: 6.3.3 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Tivoli Storage Manager (1bb99743-5532-54e2-bfa8-04d6161687cb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-1378 |
vulnerable | 2026-06-08 05:09:21.966891 |
Details available
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875.
Published: 2017-10-05T17:00:00.000Z
Updated: 2024-09-17T01:46:09.210Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1339 |
vulnerable | 2026-06-08 05:09:21.797543 |
Details available
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force ID: 126247.
Published: 2017-10-05T17:00:00.000Z
Updated: 2024-09-16T17:34:11.313Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1301 |
vulnerable | 2026-06-08 05:09:21.653530 |
Details available
IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the system, which could allow the attacker to overwrite arbitrary files on the system with elevated privileges. IBM X-Force ID: 125163.
Published: 2017-10-05T17:00:00.000Z
Updated: 2024-09-17T01:56:53.219Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8940 |
vulnerable | 2026-06-08 05:08:22.201702 |
Details available
IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these product specific database tables may allow access to passwords or other sensitive information for the product. IBM Reference #: 1998946.
Published: 2017-03-07T17:00:00.000Z
Updated: 2024-08-06T02:35:02.336Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8939 |
vulnerable | 2026-06-08 05:08:22.192866 |
Details available
IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790.
Published: 2017-06-07T17:00:00.000Z
Updated: 2024-08-06T02:35:02.305Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8937 |
vulnerable | 2026-06-08 05:08:22.155648 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4927 |
vulnerable | 2026-06-08 05:06:48.009650 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4818 |
vulnerable | 2026-06-08 05:05:46.164432 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4817 |
vulnerable | 2026-06-08 05:05:46.157596 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.