Page 2 of 125 results (0.002 seconds)

CVSS: 7.2EPSS: 1%CPEs: 17EXPL: 0

CVE-2016-8998

https://notcve.org/view.php?id=CVE-2016-8998

24 Feb 2017 — IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server. IBM Reference #: 1998747. IBM Tivoli Storage Manager Server 7.1 podría permitir a un usuario autenticado con privilegios de administrador TSM provocar un desbordamiento de búfer utilizando una consulta SQL especialmente manipulada y ejecutar código arbitrario en el servidor. Referencia de IBM: 199874... • http://www.ibm.com/support/docview.wss?uid=swg21998747 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 8.8EPSS: 0%CPEs: 18EXPL: 0

CVE-2016-6033

https://notcve.org/view.php?id=CVE-2016-6033

15 Feb 2017 — IBM Tivoli Storage Manager for Virtual Environments 7.1 (VMware) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 1995545. IBM Tivoli Storage Manager for Virtual Environments 7.1 (VMware) es vulnerable CSRF lo que podría permitir a un atacante ejecutar acciones maliciosas y no autorizadas transmitidas desde un usuario en el que la página web confía. IBM Referencia #: 19955... • http://www.ibm.com/support/docview.wss?uid=swg21995545 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 4.7EPSS: 0%CPEs: 8EXPL: 0

CVE-2016-5918

https://notcve.org/view.php?id=CVE-2016-5918

08 Feb 2017 — IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the password access option is prompt and the password is changed. IBM Tivoli Storage Manager HSM para Windows muestra la contraseña cifrada Tivoli Storage Manager en la salida de rastreo de la aplicación si la opción de acceso a la contraseña es rápida y se cambia la contraseña. • http://www.ibm.com/support/docview.wss?uid=swg21988728 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.3EPSS: 2%CPEs: 1EXPL: 0

CVE-2016-5934

https://notcve.org/view.php?id=CVE-2016-5934

08 Feb 2017 — IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. By placing a specially-crafted DLL in the victim's path, an attacker could exploit this vulnerability when the installer is executed to run arbitrary code on the system with privileges of the victim. El instalador IBM Tivoli Storage Manager FastBack podría permitir a un atacante remoto ejecutar código arbitrario en el sistema. Al colocar una DLL especialmente manipulada en el camino de la víc... • http://www.ibm.com/support/docview.wss?uid=swg21988908 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2016-6110

https://notcve.org/view.php?id=CVE-2016-6110

01 Feb 2017 — IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user. Tivoli Storage Manager de IBM, revela credenciales de inicio de sesión no cifradas en vCenter de Vmware que podrían ser obtenidas por un usuario local. • http://www.ibm.com/support/docview.wss?uid=swg21996198 • CWE-255: Credentials Management Errors •

CVSS: 5.5EPSS: 0%CPEs: 21EXPL: 0

CVE-2016-0371

https://notcve.org/view.php?id=CVE-2016-0371

01 Feb 2017 — The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while application tracing is enabled. La contraseña de Tivoli Storage Manager (TSM) puede ser mostrada en texto plano a través de la salida de rastreo de la aplicación mientras el rastreo de aplicaciones está habilitado. • http://www-01.ibm.com/support/docview.wss?uid=swg21985114 •

CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0

CVE-2016-5985

https://notcve.org/view.php?id=CVE-2016-5985

01 Feb 2017 — The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash. El cliente IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX es vulnerable a un desbordamiento de búfer cuando Journal-Based Backup está habilitado. Un atacante local podría desboradr un búfer y ejecutar código arbitrario en el sistema o provocar una caída del si... • http://www.ibm.com/support/docview.wss?uid=swg21993695 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.8EPSS: 0%CPEs: 7EXPL: 0

CVE-2016-6034

https://notcve.org/view.php?id=CVE-2016-6034

01 Feb 2017 — IBM Tivoli Storage Manager for Virtual Environments (VMware) could disclose the Windows domain credentials to a user with a high level of privileges. IBM Tivoli Storage Manager para Virtual Environments (VMware) podría revelar las credenciales de dominio de Windows a un usuario con un alto nivel de privilegios. • http://www.ibm.com/support/docview.wss?uid=swg21995544 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.0EPSS: 0%CPEs: 19EXPL: 0

CVE-2016-6043

https://notcve.org/view.php?id=CVE-2016-6043

01 Feb 2017 — Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced. Tivoli Storage Manager Operations Center podría permitir a un usuario local asumir el control de un usuario previamente registrado debido a que la expiración de sesión no está forzada. • http://www.ibm.com/support/docview.wss?uid=swg21995754 • CWE-384: Session Fixation •

CVSS: 4.3EPSS: 0%CPEs: 19EXPL: 0

CVE-2016-6044

https://notcve.org/view.php?id=CVE-2016-6044

01 Feb 2017 — IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security policy. IBM Tivoli Storage Manager Operations Center podría permitir a un atacante autenticado para habilitar o deshabilitar la APRI REST de la aplicación, lo que puede permitir que el atacante viole la política de seguridad. • http://www.ibm.com/support/docview.wss?uid=swg21995754 • CWE-284: Improper Access Control •