Page 2 of 16 results (0.005 seconds)

CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2016-6110

https://notcve.org/view.php?id=CVE-2016-6110

01 Feb 2017 — IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user. Tivoli Storage Manager de IBM, revela credenciales de inicio de sesión no cifradas en vCenter de Vmware que podrían ser obtenidas por un usuario local. • http://www.ibm.com/support/docview.wss?uid=swg21996198 • CWE-255: Credentials Management Errors •

CVSS: 6.8EPSS: 0%CPEs: 7EXPL: 0

CVE-2016-6034

https://notcve.org/view.php?id=CVE-2016-6034

01 Feb 2017 — IBM Tivoli Storage Manager for Virtual Environments (VMware) could disclose the Windows domain credentials to a user with a high level of privileges. IBM Tivoli Storage Manager para Virtual Environments (VMware) podría revelar las credenciales de dominio de Windows a un usuario con un alto nivel de privilegios. • http://www.ibm.com/support/docview.wss?uid=swg21995544 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.0EPSS: 0%CPEs: 19EXPL: 0

CVE-2016-6043

https://notcve.org/view.php?id=CVE-2016-6043

01 Feb 2017 — Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced. Tivoli Storage Manager Operations Center podría permitir a un usuario local asumir el control de un usuario previamente registrado debido a que la expiración de sesión no está forzada. • http://www.ibm.com/support/docview.wss?uid=swg21995754 • CWE-384: Session Fixation •

CVSS: 4.3EPSS: 0%CPEs: 19EXPL: 0

CVE-2016-6044

https://notcve.org/view.php?id=CVE-2016-6044

01 Feb 2017 — IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security policy. IBM Tivoli Storage Manager Operations Center podría permitir a un atacante autenticado para habilitar o deshabilitar la APRI REST de la aplicación, lo que puede permitir que el atacante viole la política de seguridad. • http://www.ibm.com/support/docview.wss?uid=swg21995754 • CWE-284: Improper Access Control •

CVSS: 8.8EPSS: 0%CPEs: 19EXPL: 0

CVE-2016-6045

https://notcve.org/view.php?id=CVE-2016-6045

01 Feb 2017 — IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Tivoli Storage Manager Operations Center es vulnerable a la falsificación de solicitudes de sitios cruzados que podrían permitir a un atacante ejecutar acciones maliciosas y no autorizadas transmitidas por un usuario que confía en el sitio web. • http://www.ibm.com/support/docview.wss?uid=swg21995754 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 5.4EPSS: 0%CPEs: 19EXPL: 0

CVE-2016-6046

https://notcve.org/view.php?id=CVE-2016-6046

01 Feb 2017 — IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Tivoli Storage Manager Operations Center es vulnerable a las secuencias de comandos de sitios cruzados. Esta vulnerabilidad permite a usuarios incrustar código JavaScript arbitrario en la IU Web alterando así la funcionalidad prev... • http://www.ibm.com/support/docview.wss?uid=swg21995754 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •