← Back

CVE-2016-8937

nvd nist
Published: Oct 5, 2017Modified: May 13, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server. IBM X-Force ID: 118750.

Affected (65)

1 product
Tivoli Storage Manager
Configuration A
65 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Version 6.1.0
Version 6.1.1
Version 6.1.2
Version 6.1.3
Version 6.1.4
Version 6.1.5.4
Version 6.1.5.5
Version 6.1.5.6
Version 6.1.5
Version 6.1
Version 6.2.0
Version 6.2.1
Version 6.2.2
Version 6.2.3
Version 6.2.4
Version 6.3.0.15
Version 6.3.0.17
Version 6.3.0.5
Version 6.3.1.2
Version 6.3.1
Version 6.3.2.2
Version 6.3.3
Version 6.3.4
Version 6.3.5.1
Version 6.3.5
Version 6.3.6.100
Version 6.3.6
Version 6.3
Version 6.4.1.0
Version 6.4.1
Version 6.4.2.100
Version 6.4.2.200
Version 6.4.2.500
Version 6.4.2.600
Version 6.4.2
Version 6.4.3.1
Version 6.4.3
Version 7.1..5.100
Version 7.1.0.1
Version 7.1.0.2
Version 7.1.0.3
Version 7.1.1.100
Version 7.1.1.1
Version 7.1.1.200
Version 7.1.1.2
Version 7.1.1.300
Version 7.1.1
Version 7.1.3.000
Version 7.1.3.100
Version 7.1.3.1
Version 7.1.3.2
Version 7.1.3
Version 7.1.4.1
Version 7.1.4.2
Version 7.1.4
Version 7.1.5.200
Version 7.1.5
Version 7.1.6
Version 7.1.7.100
Version 7.1.7.200
Version 7.1.7
Version 7.1
Version 8.1.0
Version 8.1.1.100
Version 8.1.1

References (4)

Source: psirt@us.ibm.com
PatchVendor Advisory
Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory

Timeline

No history available yet.