TS
Product
Tivoli Storage Manager
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 10Low 2
Watch
Add Tivoli Storage Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-8937 | 9.8 | Oct 5 | The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information… Affected: 6.1; 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; +34 more |
| CVE-2016-8940 | 8.8 | Mar 7 | IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries Affected: 6.1; 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; +34 more |
| CVE-2016-6045 | 8.8 | Feb 1 | IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted… Affected: 6.4.1; 6.4.1.1; 6.4.2; 6.4.2.1; 6.4.2.2; 6.4.2.3; +13 more |
| CVE-2017-1378 | 7.8 | Oct 5 | IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be… Affected: 6.1; 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; +34 more |
| CVE-2016-5985 | 7.8 | Feb 1 | The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled Affected: through 7.1.6.2; 7.1.0.0; through 6.4.3.3; 6.4.0.0; through 6.3.2.5; 6.3.0.0; +3 more |
| CVE-2018-1786 | 7.5 | Nov 12 | IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state Affected: 7.1 through 7.1.8.3 |
| CVE-2016-8998 | 7.2 | Feb 24 | IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and… Affected: 7.1.1; 7.1.1.1; 7.1.1.2; 7.1.1.100; 7.1.1.200; 7.1.1.300; +11 more |
| CVE-2020-28198 | 7.0 | May 6 | The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 (Command Line Administrative Interface, dsmadmc.exe) is vulnerable to an exploitable stack buffer overflow Affected: 5.2.0.1 |
| CVE-2016-6043 | 7.0 | Feb 1 | Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced Affected: 6.4.1; 6.4.1.1; 6.4.2; 6.4.2.1; 6.4.2.2; 6.4.2.3; +13 more |
| CVE-2016-6110 | 6.5 | Feb 1 | IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user Affected: through 7.1.6.3; 7.1.0.0 |
| CVE-2018-1550 | 5.5 | Sep 26 | IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other users Affected: 7.1.8.0 through 7.1.8.2; 8.1.2 through 8.1.4 |
| CVE-2017-1301 | 5.5 | Oct 5 | IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack Affected: 6.1; 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; +34 more |
| CVE-2016-8939 | 5.5 | Jun 7 | IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be compromised Affected: 6.1; 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; +34 more |
| CVE-2016-8916 | 5.5 | May 5 | IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set password command is issued Affected: through 6.3; 6.4.0.0; 6.4.1; 6.4.1.0; 6.4.2; 6.4.2.100; +30 more |
| CVE-2016-0371 | 5.5 | Feb 1 | The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while application tracing is enabled Affected: 7.1.0.0 through 7.1.6.2; 6.4.0.0 through 6.4.3.3; 5.5 through 6.3.2.5 |
| CVE-2016-6046 | 5.4 | Feb 1 | IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting Affected: 6.4.1; 6.4.1.1; 6.4.2; 6.4.2.1; 6.4.2.2; 6.4.2.3; +13 more |
| CVE-2015-4951 | 5.3 | Jan 20 | Client Acceptor Daemon (CAD) in the client in IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows… Affected: 5.5; 6.1; 6.2; 6.3; 6.4; 7.1 |
| CVE-2017-1339 | 4.4 | Oct 5 | IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password Affected: 6.1; 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; +34 more |
| CVE-2016-6044 | 4.3 | Feb 1 | IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security… Affected: 6.4.1; 6.4.1.1; 6.4.2; 6.4.2.1; 6.4.2.2; 6.4.2.3; +13 more |
| CVE-2015-7408 | 3.7 | Feb 15 | The server in IBM Spectrum Protect (aka Tivoli Storage Manager) 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which… Affected: 5.5.0.0; 6.1.0.0; 6.2.0.0; 6.3.3.0; 6.3.4.0; 6.3.5.0; +4 more |
| CVE-2016-2894 | 2.5 | Jul 3 | IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved… Affected: 5.5; 5.5.0; 5.5.2; 5.5.3; 5.5.4; 5.5.4.1; +34 more |
| CVE-2015-4927 | – | Nov 4 | The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 before 7.1.3 on Linux and AIX uses world-writable permissions… Affected: 6.3.3; 6.3.4; 6.3.5; 6.3.5.1; 7.1; 7.1.1; +1 more |
| CVE-2014-4818 | – | Feb 24 | dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4.x, 5.5.x, 6.x before 6.4.3, and 7.1.x before 7.1.2 allows local users to discover the backup/restore encryption-key… Affected: 5.4.0; 5.5; 6.1; 6.2; 6.3; 6.3.3; +7 more |
| CVE-2014-6184 | – | Feb 22 | Stack-based buffer overflow in dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4 through 5.4.3.6, 5.5 through 5.5.4.3, 6.1 through 6.1.5.6, 6.2 before 6.2.5.4, and 6.3… Affected: 5.4.0 through 5.4.3.6; 5.5.0 through 5.5.4.3; 6.1.0 through 6.1.5.6; 6.2.0 through 6.2.5.3; 6.3.0 through 6.3.2.2 |
| CVE-2014-6195 | – | Feb 14 | The (1) Java GUI and (2) Web GUI components in the IBM Tivoli Storage Manager (TSM) Backup-Archive client 5.4 and 5.5 before 5.5.4.4 on AIX, Linux, and Solaris; 5.4.x and 5.5.x on… Affected: 7.1; 5.5; 6.4; 6.1; 5.4; 6.3; +1 more |
| CVE-2014-6185 | – | Feb 13 | dsmtca in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.2.3, 6.4 before 6.4.2.2, and 7.1 before 7.1.1.3 does not properly restrict shared-library loading, which… Affected: 6.3.0; 6.3.0.5; 6.3.0.15; 6.3.1.2; 6.3.2.1; 6.3.2.2; +16 more |
| CVE-2014-4813 | – | Feb 13 | Race condition in the client in IBM Tivoli Storage Manager (TSM) 5.4.0.0 through 5.4.3.6, 5.5.0.0 through 5.5.4.3, 6.1.0.0 through 6.1.5.6, 6.2 before 6.2.5.4, 6.3 before 6.3.2.3,… Affected: 5.4.1; 5.4.2; 5.4.2.2; 5.4.2.3; 5.4.2.4; 5.4.3.0; +34 more |
| CVE-2014-4817 | – | Nov 18 | The server in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file… Affected: 5.1.0; 5.1.1; 5.1.5; 5.1.6; 5.1.7; 5.1.8; +34 more |
| CVE-2013-6335 | – | Aug 26 | The Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on… Affected: 5.1 before 6.2.5.3; 6.3.0 before 6.3.2; 6.4.0 before 6.4.2; 7.1.0.0 before 7.1.0.3; 5.1 before 6.1.5.6 |
| CVE-2014-0876 | – | Aug 17 | Buffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.2.5.2, 6.3.x… Affected: 5.4.0; 5.5.0; 6.1.0; 6.2.0; 6.3.0; 6.4.0 |
| CVE-2013-5371 | – | Jan 23 | The client in IBM Tivoli Storage Manager (TSM) 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System (ReFS) files across backup and restore operations,… Affected: 6.3.1; 6.4.0 |
| CVE-2013-2964 | – | Oct 4 | Buffer overflow in dsmtca in IBM Tivoli Storage Manager (TSM) through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.4.7, and 6.3.0 through 6.3.0.17 on UNIX and Linux allows… Affected: 6.3.0; 6.3.0.17; 6.1.0; 6.1.1; 6.1.2; 6.1.3; +34 more |
| CVE-2013-0472 | – | Feb 21 | The Web GUI in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and… Affected: through 6.2.4.4; 3.1.0; 3.2.1; 4.2; 4.2.1; 4.2.2; +34 more |
| CVE-2013-0471 | – | Feb 21 | The traditional scheduler in the client in IBM Tivoli Storage Manager (TSM) before 6.2.5.0, 6.3 before 6.3.1.0, and 6.4 before 6.4.0.1, when Prompted mode is enabled, allows… Affected: through 6.2.4.4; 3.1.0; 3.2.1; 4.2; 4.2.1; 4.2.2; +34 more |
| CVE-2011-1223 | – | Jul 17 | Buffer overflow in the Alternate Data Stream (aka ADS or named stream) functionality in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4, 5.5.x before… Affected: through 5.4.3.3; 4.2; 4.2.1; 5.1.8; 5.2.5.1; 5.2.7; +26 more |
| CVE-2011-1222 | – | Jul 17 | Buffer overflow in the Journal Based Backup (JBB) feature in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4, 5.5.x before 5.5.3, 6.x before 6.1.4,… Affected: through 5.4.3.3; 4.2; 4.2.1; 5.1.8; 5.2.5.1; 5.2.7; +26 more |
| CVE-2010-4605 | – | Dec 29 | Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and… Affected: 5.3.0; 5.3.1; 5.3.2; 5.3.2.4; 5.3.3; 5.3.4; +22 more |
| CVE-2010-4606 | – | Dec 29 | Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manager (TSM) 5.4.x before 5.4.3.4, 5.5.x… Affected: 5.4.0 before 5.4.3.4; 5.5.0 before 5.5.3; 6.1.0 before 6.1.4; 6.2.0 before 6.2.2 |
| CVE-2010-4604 | – | Dec 29 | Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive client in IBM Tivoli Storage Manager… Affected: 5.3.0 through 5.3.6.7; 5.4.0 through 5.4.3.3; 5.5.0 through 5.5.2.7; 6.1.0 through 6.1.3 |
| CVE-2009-3855 | – | Nov 4 | Multiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and the (3) OS/400 API client, in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.6,… Affected: 5.2.5.3; 5.3; 5.3.0; 5.3.1; 5.3.2; 5.3.2.4; +11 more |
| CVE-2009-3854 | – | Nov 4 | Buffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7 and 5.4 before 5.4.2 allows remote attackers to execute… Affected: 5.2.5.3; 5.3; 5.3.0; 5.3.1; 5.3.2; 5.3.2.4; +12 more |
| CVE-2009-3853 | – | Nov 4 | Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before… Affected: 5.2.5.3; 5.3; 5.3.0; 5.3.1; 5.3.2; 5.3.2.4; +21 more |
| CVE-2009-1178 | – | Mar 31 | Unspecified vulnerability in the server in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.2 and 6.x before 6.1 has unknown impact and attack vectors related to the "admin… Affected: 5.3.0; 5.3.1; 6.0 |
| CVE-2004-2762 | – | Mar 31 | The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x… Affected: 4.2; 4.2.1; 4.2.2; 4.2.3; 4.2.4; 5.1.0; +11 more |
| CVE-2003-1570 | – | Mar 31 | The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the server console in some circumstances,… Affected: 5.1.0; 5.1.1; 5.1.5; 5.1.6; 5.1.7; 5.1.8; +5 more |
| CVE-2008-4563 | – | Mar 11 | Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and… Affected: 5.2; 5.3; 5.3.0; 5.3.1; 5.3.2; 5.3.2.4; +10 more |
| CVE-2006-6309 | – | Dec 6 | Multiple array index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to read arbitrary memory locations and cause a denial of… Affected: through 5.2.9; 5.3.0; 5.3.1; 5.3.2; 5.3.3 |
| CVE-2006-5855 | – | Dec 6 | Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service (crash) and possibly execute… Affected: 5.2.7; 5.2.8; 5.3.0; 5.3.1; 5.3.2; 5.3.3 |
| CVE-2002-0541 | – | Jul 3 | Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a… Affected: 4.2; 4.2.1 |
Showing 49