PT-2016-6726 · Ibm · Ibm Tivoli Storage Manager For Space Management

Publicado 2016-09-12 · Atualizado 2016-11-28 · CVE-2016-5927

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) versions 6.3.x through 6.3.2.5 IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) versions 6.4.x through 6.4.3.2 IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) versions 7.1.x through 7.1.5

Description The issue allows local users to discover an encrypted password by reading application-trace output when certain dsmsetpw tracing is configured.

Recommendations For versions 6.3.x through 6.3.2.5, update to version 6.3.2.6 or later. For versions 6.4.x through 6.4.3.2, update to version 6.4.3.3 or later. For versions 7.1.x through 7.1.5, update to version 7.1.6 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-5927

Produtos afetados

Ibm Tivoli Storage Manager For Space Management

Referências · 5

• http://www-01.ibm.com/support/docview.wss?uid=swg21989006 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT15203 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-5927 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-5927 · Nota de Segurança
• http://securityfocus.com/bid/92723 · Nota