PT-2015-1398 · Ibm · Ibm Tivoli Storage Manager Fastback

Lola Montez · Publicado 2015-06-30 · Atualizado 2016-12-28 · CVE-2015-1941

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack version 6.1 before 6.1.12

Description The issue allows remote attackers to read arbitrary files by sending crafted TCP packets to an unspecified port. This is due to a lack of protection for service data in the Tivoli Storage Manager FastBack program.

Recommendations For IBM Tivoli Storage Manager FastBack version 6.1 before 6.1.12, update to version 6.1.12 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2015-10493

CVE-2015-1941

ZDI-15-268

Produtos afetados

Ibm Tivoli Storage Manager Fastback

Referências · 7

• http://www-01.ibm.com/support/docview.wss?uid=swg21959398 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-10493 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-1941 · Nota de Segurança
• http://securitytracker.com/id/1032773 · Nota
• https://zerodayinitiative.com/advisories/ZDI-15-268 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-15-268 · Nota
• http://securityfocus.com/bid/75446 · Nota