Ibm Tivoli Storage Manager Vulnerabilità

Versione

6.1.0	34
6.1.1	34
6.1.2	34
6.1.3	34
6.1.4	34

Contromisure

Official Fix	90
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	28

Sfruttabilità

High	6
Functional	0
Proof-of-Concept	16
Unproven	2
Not Defined	94

Accesso al vettore

Not Defined	0
Physical	0
Local	30
Adjacent	6
Network	82

Autenticazione

Not Defined	0
High	0
Low	24
None	94

Interazione dell'utente

Not Defined	0
Required	4
None	114

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	4
≤5	8
≤6	26
≤7	10
≤8	46
≤9	10
≤10	14

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	6
≤5	12
≤6	22
≤7	44
≤8	12
≤9	14
≤10	8

VulDB

≤1	0
≤2	0
≤3	0
≤4	8
≤5	12
≤6	22
≤7	8
≤8	50
≤9	4
≤10	14

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	4
≤7	4
≤8	6
≤9	2
≤10	10

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	2
≤8	0
≤9	0
≤10	0

Fornitore

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 giorni

<1k	0
<2k	0
<5k	8
<10k	24
<25k	60
<50k	22
<100k	4
≥100k	0

Exploiter aujourd'hui

<1k	100
<2k	4
<5k	4
<10k	10
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (76): 5 Release 2, 5.0, 5.1, 5.2, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.2.5, 5.2.6, 5.2.7, 5.2.8, 5.3, 5.3.1, 5.3.2, 5.3.3, 5.3.5, 5.3.5.1, 5.3.6, 5.3.6.1, 5.3.6.2, 5.3.6.3, 5.4, 5.4.1, 5.4.1.1, 5.4.1.2, 5.5, 5.5.1, 5.5.1.4, 5.5.2, 5.5.3, 5.5.4, 5.5.5, 5.5.6, 6.0, 6.1, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.5, 6.1.6, 6.1.7, 6.1.8, 6.1.9, 6.1.11, 6.1.11.1, 6.1.12, 6.1.12.1, 6.2, 6.2.1, 6.2.2, 6.3, 6.3.1, 6.3.2, 6.3.2.1, 6.3.2.2, 6.3.2.3, 6.3.2.4, 6.3.2.5, 6.3.3, 6.3.4, 6.3.5, 6.4, 6.4.3, 6.4.3.1, 6.4.3.2, 7.0, 7.1, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 8.1, 8.1.7

Link to Product Website: https://www.ibm.com/

Tipo di software: Backup Software

Data di pubblicazione	Base	Temp	Vulnerabilità	0day	Oggi	Sfr	Con	CTI	CVE
07/05/2021	5.5	5.2	IBM Tivoli Storage Manager Command Line Administrative Interface dsmadmc.exe buffer overflow	$5k-$25k	$0-$5k	Proof-of-Concept	Not Defined	0.02	CVE-2020-28198
02/07/2019	5.9	5.9	IBM Tivoli Storage Manager Database escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-4140
08/04/2019	6.2	6.2	IBM Tivoli Storage Manager escalazione di privilegi	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2018-1853
02/04/2019	4.9	4.9	IBM Tivoli Storage Manager Web User Interface escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-4093
26/09/2018	5.5	5.5	IBM Tivoli Storage Manager crittografia debole	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-1785
26/09/2018	6.2	6.2	IBM Tivoli Storage Manager crittografia debole	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-1545
05/10/2017	6.0	6.0	IBM Tivoli Storage Manager Application Trace Credentials escalazione di privilegi	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2017-1378
05/10/2017	3.8	3.8	IBM Tivoli Storage Manager Password rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2017-1339
05/10/2017	7.5	7.5	IBM Tivoli Storage Manager Authentication autenticazione debole	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.03	CVE-2016-8937
05/05/2017	4.4	4.2	IBM Tivoli Storage Manager Log File rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-8916
07/03/2017	6.5	6.5	IBM Tivoli Storage Manager SQL rivelazione di un 'informazione	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2016-8940
24/02/2017	6.7	6.4	IBM Tivoli Storage Manager SQL Query buffer overflow	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-8998
08/02/2017	6.4	6.4	IBM Tivoli Storage Manager Fastback Installer escalazione di privilegi	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2016-5934
08/02/2017	4.0	4.0	IBM Tivoli Storage Manager HSM Password rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2016-5918
01/02/2017	4.9	4.7	IBM Tivoli Storage Manager Credentials escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2016-6110
01/02/2017	4.4	4.4	IBM Tivoli Storage Manager Operations Center cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2016-6046
01/02/2017	6.5	6.5	IBM Tivoli Storage Manager Operations Center cross site request forgery	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2016-6045
01/02/2017	5.3	5.3	IBM Tivoli Storage Manager Operations Center REST API escalazione di privilegi	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2016-6044
01/02/2017	6.1	6.1	IBM Tivoli Storage Manager Operations Center Session Expiration autenticazione debole	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2016-6043
01/02/2017	5.9	5.6	IBM Tivoli Storage Manager for Virtual Environments Password rivelazione di un 'informazione	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-6034
01/02/2017	6.5	6.5	IBM Tivoli Storage Manager AIX Client buffer overflow	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2016-5985
01/02/2017	3.6	3.6	IBM Tivoli Storage Manager Application Trace rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2016-0371
12/09/2016	5.5	5.3	IBM Tivoli Storage Manager for Space Management dsmsetpw Tracing Password rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-5927
08/08/2016	6.2	6.0	IBM Tivoli Storage Manager MMC GUI rivelazione di un 'informazione	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-3059
25/07/2016	7.8	7.5	IBM Tivoli Storage Manager Server Flexera InstallAnywhere Third Party escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-4560