PT-2015-1398 · Ibm · Ibm Tivoli Storage Manager Fastback

Lola Montez · Published 2015-06-30 · Updated 2016-12-28 · CVE-2015-1941

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack version 6.1 before 6.1.12

Description The issue allows remote attackers to read arbitrary files by sending crafted TCP packets to an unspecified port. This is due to a lack of protection for service data in the Tivoli Storage Manager FastBack program.

Recommendations For IBM Tivoli Storage Manager FastBack version 6.1 before 6.1.12, update to version 6.1.12 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2015-10493

CVE-2015-1941

ZDI-15-268

Affected Products

Ibm Tivoli Storage Manager Fastback

References · 7

• http://www-01.ibm.com/support/docview.wss?uid=swg21959398 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10493 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-1941 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-268 · Security Note
• http://securitytracker.com/id/1032773 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-268 · Note
• http://securityfocus.com/bid/75446 · Note