GCVE - cpe:2.3:a:ibm:tivoli_storage_manager:6.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_storage_manager:6.1.1:*:*:*:*:*:*:*

part: a version: 6.1.1 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Tivoli Storage Manager (`1bb99743-5532-54e2-bfa8-04d6161687cb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-1378`	vulnerable	2026-06-08 05:09:21.966447	Details available IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875. Published: 2017-10-05T17:00:00.000Z Updated: 2024-09-17T01:46:09.210Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/126875 http://www.ibm.com/support/docview.wss?uid=swg22006215	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1339`	vulnerable	2026-06-08 05:09:21.797190	Details available IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force ID: 126247. Published: 2017-10-05T17:00:00.000Z Updated: 2024-09-16T17:34:11.313Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/101113 http://www.ibm.com/support/docview.wss?uid=swg22007936 http://www.securitytracker.com/id/1039498 https://exchange.xforce.ibmcloud.com/vulnerabilities/126247	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1301`	vulnerable	2026-06-08 05:09:21.640227	Details available IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the system, which could allow the attacker to overwrite arbitrary files on the system with elevated privileges. IBM X-Force ID: 125163. Published: 2017-10-05T17:00:00.000Z Updated: 2024-09-17T01:56:53.219Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg22006248 http://www.securityfocus.com/bid/101107 https://exchange.xforce.ibmcloud.com/vulnerabilities/125163	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8940`	vulnerable	2026-06-08 05:08:22.201351	Details available IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these product specific database tables may allow access to passwords or other sensitive information for the product. IBM Reference #: 1998946. Published: 2017-03-07T17:00:00.000Z Updated: 2024-08-06T02:35:02.336Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg21998946	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8939`	vulnerable	2026-06-08 05:08:22.192404	Details available IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790. Published: 2017-06-07T17:00:00.000Z Updated: 2024-08-06T02:35:02.305Z Open on db.gcve.eu Reference links https://improsec.com/blog/vulnerability-in-tsm http://www.securitytracker.com/id/1038607 http://www.securityfocus.com/bid/98783 http://www.ibm.com/support/docview.wss?uid=swg22003738 https://exchange.xforce.ibmcloud.com/vulnerabilities/118790	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8937`	vulnerable	2026-06-08 05:08:22.143325	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2894`	vulnerable	2026-06-08 05:07:43.654772	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4817`	vulnerable	2026-06-08 05:05:46.151848	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4813`	vulnerable	2026-06-08 05:05:46.084467	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2964`	vulnerable	2026-06-08 05:04:29.617040	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0472`	vulnerable	2026-06-08 05:03:48.259291	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0471`	vulnerable	2026-06-08 05:03:48.252874	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1223`	vulnerable	2026-06-08 04:57:57.238032	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1222`	vulnerable	2026-06-08 04:57:57.231646	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4605`	vulnerable	2026-06-08 04:56:29.654899	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.