PT-2016-6726 · Ibm · Ibm Tivoli Storage Manager For Space Management

Published 2016-09-12 · Updated 2016-11-28 · CVE-2016-5927

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) versions 6.3.x through 6.3.2.5 IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) versions 6.4.x through 6.4.3.2 IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) versions 7.1.x through 7.1.5

Description The issue allows local users to discover an encrypted password by reading application-trace output when certain dsmsetpw tracing is configured.

Recommendations For versions 6.3.x through 6.3.2.5, update to version 6.3.2.6 or later. For versions 6.4.x through 6.4.3.2, update to version 6.4.3.3 or later. For versions 7.1.x through 7.1.5, update to version 7.1.6 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-5927

Affected Products

Ibm Tivoli Storage Manager For Space Management

References · 5

• http://www-01.ibm.com/support/docview.wss?uid=swg21989006 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT15203 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-5927 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5927 · Security Note
• http://securityfocus.com/bid/92723 · Note