PT-2015-1392 · Ibm · Ibm Tivoli Storage Manager Fastback

Lola Montez · Published 2015-06-30 · Updated 2016-12-30 · CVE-2015-1986

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack versions 6.1 through 6.1.11

Description The issue is related to insufficient input validation in the Tivoli Storage Manager FastBack program, allowing a remote attacker to execute arbitrary code.

Recommendations For versions 6.1 through 6.1.11, update to version 6.1.12 or later to resolve the issue.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2015-10487

CVE-2015-1986

ZDI-15-274

Affected Products

Ibm Tivoli Storage Manager Fastback

References · 7

• http://www-01.ibm.com/support/docview.wss?uid=swg21959398 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-1986 · Security Note
• https://bdu.fstec.ru/vul/2015-10487 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-274 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-15-274 · Note
• http://securitytracker.com/id/1032773 · Note
• http://securityfocus.com/bid/75461 · Note