CVE-2016-5945

Published: Sep 26, 2016Modified: May 6, 2026

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to upload non-executable files via a crafted HTTP request.

Affected (16)

Products: Ibm: Spectrum Control, Tivoli Storage Productivity Center

Ibm

2 products

Spectrum Control

Tivoli Storage Productivity Center

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Spectrum Control	Version 5.2.10.1
Ibm Spectrum Control	Version 5.2.10
Ibm Spectrum Control	Version 5.2.8
Ibm Spectrum Control	Version 5.2.9

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Storage Productivity Center	Version 5.2.0
Ibm Tivoli Storage Productivity Center	Version 5.2.1.1
Ibm Tivoli Storage Productivity Center	Version 5.2.1
Ibm Tivoli Storage Productivity Center	Version 5.2.2
Ibm Tivoli Storage Productivity Center	Version 5.2.3
Ibm Tivoli Storage Productivity Center	Version 5.2.4.1
Ibm Tivoli Storage Productivity Center	Version 5.2.4
Ibm Tivoli Storage Productivity Center	Version 5.2.5.1
Ibm Tivoli Storage Productivity Center	Version 5.2.5
Ibm Tivoli Storage Productivity Center	Version 5.2.6
Ibm Tivoli Storage Productivity Center	Version 5.2.7.1
Ibm Tivoli Storage Productivity Center	Version 5.2.7