CVE-2011-1372

Published: Nov 28, 2011Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The Web User Interface on the IBM TS3100 and TS3200 tape libraries with firmware before A.60 allows remote attackers to bypass authentication and obtain administrative access via unspecified vectors.

Affected (4)

Products: Ibm: Ts3100 Tape Library Firmware, Ts3200 Tape Library Firmware, Ts3100 Tape Library, Ts3200 Tape Library

Ibm

4 products

Ts3100 Tape Library Firmware

Ts3200 Tape Library Firmware

Ts3100 Tape Library

Ts3200 Tape Library

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Ts3100 Tape Library Firmware	Up to a.40
Ibm Ts3200 Tape Library Firmware	Up to a.40
Ibm Ts3100 Tape Library	All versions
Ibm Ts3200 Tape Library	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (4)

http://www.ibm.com/support/docview.wss?uid=ssg1S1003938

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/71026

Source: cve@mitre.org

http://www.ibm.com/support/docview.wss?uid=ssg1S1003938

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/71026

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.