PT-2015-1390 · Ibm · Ibm Tivoli Storage Manager Fastback

Brian Gorenc · Publicado 2015-06-30 · Atualizado 2016-12-28 · CVE-2015-1938

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack versions prior to 6.1.12

Description The issue is related to the lack of input data sanitization in the Tivoli Storage Manager FastBack program, allowing remote attackers to execute arbitrary commands. This can be achieved through unspecified vectors.

Recommendations For versions prior to 6.1.12, update to version 6.1.12 or later to resolve the issue.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

BDU:2015-10485

CVE-2015-1938

ZDI-15-272

Produtos afetados

Ibm Tivoli Storage Manager Fastback

Referências · 7

• http://www-01.ibm.com/support/docview.wss?uid=swg21959398 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-1938 · Nota de Segurança
• http://securityfocus.com/bid/75444 · Nota
• https://zerodayinitiative.com/advisories/ZDI-15-272 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-10485 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-15-272 · Nota
• http://securitytracker.com/id/1032773 · Nota