PT-2017-9883 · Ibm · Ibm Tivoli Storage Manager

Kęstutis Gudinavičius · Publicado 2017-10-05 · Atualizado 2017-10-25 · CVE-2016-8937

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager versions 7.1 and 8.1

Description The default authentication protocol of the IBM Tivoli Storage Manager is susceptible to a brute force attack due to the disclosure of excessive information during the authentication process. This could allow an attacker to obtain user or administrative access to the TSM server.

Recommendations For versions 7.1 and 8.1, consider changing the default authentication protocol to a more secure alternative to mitigate the risk of brute force attacks. As a temporary workaround, restrict access to the TSM server and limit the number of authentication attempts to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2016-8937

Produtos afetados

Ibm Tivoli Storage Manager

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-8937 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=swg22007935 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-8937 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/118750 · Aviso do Fabricante