Unscored severity · published Sep 21, 2007
CVE-2007-5022
Unspecified vulnerability in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2, when using…
–
CVSS
2%
EPSS
No
On KEV
Description
Unspecified vulnerability in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2, when using "server-initiated prompted scheduling," allows remote attackers to read a client's data, aka IC53616.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Tivoli Storage Manager Client · Ibm
5.1 before 5.1.8.1; 5.2 before 5.2.5.2; 5.3 before 5.3.5.3; 5.4 before 5.4.1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5022
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5022
Broken Link
http://osvdb.org/38162
Third Party Advisory
http://secunia.com/advisories/26883
Patch
http://www-1.ibm.com/support/docview.wss?uid=swg21268775
Vendor Advisory
http://www-1.ibm.com/support/search.wss?rs=0&q=IC53616&apar=only
Patch
http://www.securityfocus.com/bid/25743
Third Party Advisory
http://www.securitytracker.com/id?1018725
More from Tivoli Storage Manager Client
–
CVE-2009-1522
The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows, when SSL is used, allows remote attackers to conduct unspecified man-in-the-middle attacks…
–
CVE-2009-1521
Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 through 5.4.2.6, and 5.5.0.0…
–
CVE-2009-1520
Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6,…
–
CVE-2008-4828
Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3,…
–
CVE-2008-4801
Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (CAD) and the scheduler in the Backup-Archive client 5.1.0.0…
