Tivoli Storage Manager (Ibm) - vulnerabilities (CVEs)

49 CVEs, 0 in the last 30 days, 184 known versions, newest CVE from 2021-05-06. Vendor: Ibm.

CVEs of Tivoli Storage Manager

CVE-2020-28198 - CVSS 7 (high), 2021-05-06: The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 (Command Line Administrative Interface, dsmadmc.exe) is vulnerable to an exploitable…
CVE-2018-1786 - CVSS 7.5 (high), 2018-11-12: IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/IP resource leakage…
CVE-2018-1550 - CVSS 6.2 (medium), 2018-09-26: IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other…
CVE-2016-8937 - CVSS 9.8 (critical), 2017-10-05: The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too…
CVE-2017-1378 - CVSS 7.8 (high), 2017-10-05: IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output…
CVE-2017-1339 - CVSS 4.4 (medium), 2017-10-05: IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to…
CVE-2017-1301 - CVSS 5.5 (medium), 2017-10-05: IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files…
CVE-2016-8939 - CVSS 5.5 (medium), 2017-06-07: IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be…
CVE-2016-8916 - CVSS 5.5 (medium), 2017-05-05: IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set password command is…
CVE-2016-8940 - CVSS 8.8 (high), 2017-03-07: IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an…
CVE-2016-8998 - CVSS 7.2 (high), 2017-02-24: IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted…
CVE-2016-6110 - CVSS 6.5 (medium), 2017-02-01: IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user.
CVE-2016-0371 - CVSS 5.5 (medium), 2017-02-01: The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while application tracing is enabled.
CVE-2016-6044 - CVSS 4.3 (medium), 2017-02-01: IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker…
CVE-2016-6043 - CVSS 7 (high), 2017-02-01: Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced.
CVE-2016-6046 - CVSS 5.4 (medium), 2017-02-01: IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
CVE-2016-5985 - CVSS 7.8 (high), 2017-02-01: The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker…
CVE-2016-6045 - CVSS 8.8 (high), 2017-02-01: IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized…
CVE-2016-2894 - CVSS 2.5 (low), 2016-07-03: IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain…
CVE-2015-7408 - CVSS 3.7 (low), 2016-02-15: The server in IBM Spectrum Protect (aka Tivoli Storage Manager) 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the…
CVE-2015-4951 - CVSS 5.3 (medium), 2016-01-20: Client Acceptor Daemon (CAD) in the client in IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1…
CVE-2015-4927 - CVSS 7.2 (high), 2015-11-04: The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 before 7.1.3 on Linux and AIX uses…
CVE-2014-4818 - CVSS 2.1 (low), 2015-02-24: dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4.x, 5.5.x, 6.x before 6.4.3, and 7.1.x before 7.1.2 allows local users to discover the…
CVE-2014-6184 - CVSS 7.2 (high), 2015-02-22: Stack-based buffer overflow in dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4 through 5.4.3.6, 5.5 through 5.5.4.3, 6.1 through 6.1.5.6, 6.2…
CVE-2014-6195 - CVSS 1.9 (low), 2015-02-14: The (1) Java GUI and (2) Web GUI components in the IBM Tivoli Storage Manager (TSM) Backup-Archive client 5.4 and 5.5 before 5.5.4.4 on AIX, Linux, and…
CVE-2014-6185 - CVSS 7.2 (high), 2015-02-13: dsmtca in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.2.3, 6.4 before 6.4.2.2, and 7.1 before 7.1.1.3 does not properly restrict…
CVE-2014-4813 - CVSS 6.9 (medium), 2015-02-13: Race condition in the client in IBM Tivoli Storage Manager (TSM) 5.4.0.0 through 5.4.3.6, 5.5.0.0 through 5.5.4.3, 6.1.0.0 through 6.1.5.6, 6.2 before…
CVE-2014-4817 - CVSS 2.1 (low), 2014-11-18: The server in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access…
CVE-2013-6335 - CVSS 3.3 (low), 2014-08-26: The Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and…
CVE-2014-0876 - CVSS 2.1 (low), 2014-08-17: Buffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.x and 6.x…
CVE-2013-5371 - CVSS 2.1 (low), 2014-01-23: The client in IBM Tivoli Storage Manager (TSM) 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System (ReFS) files across backup…
CVE-2013-2964 - CVSS 7.2 (high), 2013-10-04: Buffer overflow in dsmtca in IBM Tivoli Storage Manager (TSM) through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.4.7, and 6.3.0 through 6.3.0.17 on…
CVE-2013-0472 - CVSS 5.1 (medium), 2013-02-21: The Web GUI in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain…
CVE-2013-0471 - CVSS 4.3 (medium), 2013-02-21: The traditional scheduler in the client in IBM Tivoli Storage Manager (TSM) before 6.2.5.0, 6.3 before 6.3.1.0, and 6.4 before 6.4.0.1, when Prompted mode is…
CVE-2011-1223 - CVSS 7.2 (high), 2011-07-17: Buffer overflow in the Alternate Data Stream (aka ADS or named stream) functionality in the backup-archive client in IBM Tivoli Storage Manager (TSM) before…
CVE-2011-1222 - CVSS 7.2 (high), 2011-07-17: Buffer overflow in the Journal Based Backup (JBB) feature in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4, 5.5.x before 5.5.3,…
CVE-2010-4604 - CVSS 7.2 (high), 2010-12-29: Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive client in IBM…
CVE-2010-4606 - CVSS 7.5 (high), 2010-12-29: Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manager (TSM) 5.4.x…
CVE-2010-4605 - CVSS 6.6 (medium), 2010-12-29: Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3,…
CVE-2009-3853 - CVSS 9.3 (critical), 2009-11-04: Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before…
CVE-2009-3855 - CVSS 9.3 (critical), 2009-11-04: Multiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and the (3) OS/400 API client, in IBM Tivoli Storage Manager (TSM)…
CVE-2009-3854 - CVSS 10 (critical), 2009-11-04: Buffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7 and 5.4 before 5.4.2 allows remote…
CVE-2009-1178 - CVSS 10 (critical), 2009-03-31: Unspecified vulnerability in the server in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.2 and 6.x before 6.1 has unknown impact and attack vectors…
CVE-2004-2762 - CVSS 4.3 (medium), 2009-03-31: The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x…
CVE-2003-1570 - CVSS 3.5 (low), 2009-03-31: The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the server console in…
CVE-2008-4563 - CVSS 10 (critical), 2009-03-11: Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express…
CVE-2006-6309 - CVSS 7.5 (high), 2006-12-06: Multiple array index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to read arbitrary memory locations…
CVE-2006-5855 - CVSS 10 (critical), 2006-12-06: Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service (crash)…
CVE-2002-0541 - CVSS 7.5 (high), 2002-07-03: Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote…