PT-2015-1392 · Ibm · Ibm Tivoli Storage Manager Fastback

Lola Montez · Publicado 2015-06-30 · Atualizado 2016-12-30 · CVE-2015-1986

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack versions 6.1 through 6.1.11

Description The issue is related to insufficient input validation in the Tivoli Storage Manager FastBack program, allowing a remote attacker to execute arbitrary code.

Recommendations For versions 6.1 through 6.1.11, update to version 6.1.12 or later to resolve the issue.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

BDU:2015-10487

CVE-2015-1986

ZDI-15-274

Produtos afetados

Ibm Tivoli Storage Manager Fastback

Referências · 7

• http://www-01.ibm.com/support/docview.wss?uid=swg21959398 · Aviso do Fabricante
• http://zerodayinitiative.com/advisories/ZDI-15-274 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1986 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-10487 · Nota de Segurança
• http://securitytracker.com/id/1032773 · Nota
• http://securityfocus.com/bid/75461 · Nota
• https://zerodayinitiative.com/advisories/ZDI-15-274 · Nota de Segurança