PT-2009-1138 · Ibm · Ibm Tivoli Storage Manager

Published 2009-03-31 · Updated 2017-08-17 · CVE-2003-1570

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager versions 5.1.x through 5.2.1.1 IBM Tivoli Storage Manager versions 6.x through 6.0

Description The issue allows remote authenticated administrators to monitor server operations by establishing a console mode session due to the server not requiring credentials to observe the server console in some circumstances, related to session exposure.

Recommendations For IBM Tivoli Storage Manager versions 5.1.x through 5.2.1.1, update to version 5.2.1.2 or later. For IBM Tivoli Storage Manager versions 6.x through 6.0, update to version 6.1 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2003-1570

Affected Products

Ibm Tivoli Storage Manager

References · 8

• http://www-1.ibm.com/support/docview.wss?uid=swg1IC37554 · Vendor Advisory
• http://secunia.com/advisories/34498 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1570 · Security Note
• http://vupen.com/english/advisories/2009/0881 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21375360 · Note
• http://securityfocus.com/bid/34285 · Note
• http://securitytracker.com/id?1021947 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49536 · Note