CVE-2016-8940
N/A
N/A
Summary
IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these product specific database tables may allow access to passwords or other sensitive information for the product. IBM Reference #: 1998946.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM Corporation | Tivoli Storage Manager | 5.3.5.3 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.4.1.2 | affected |
| IBM Corporation | Tivoli Storage Manager | 4.2 | affected |
| IBM Corporation | Tivoli Storage Manager | 4.2.1 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.1.8 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.2.5.1 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.2.7 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.2.8 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.2.9 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.3.0 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.3.1 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.3.2 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.3.3 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.4.4.0 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.4.2.4 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.4.2.3 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.4.2.2 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.3.6.9 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.3.6.2 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.3.6.1 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.3.4 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.2.5.3 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.2.5.2 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.2.4 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.3.5.1 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.3.2.4 | affected |
| IBM Corporation | Tivoli Storage Manager | 6.0 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.1.0 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.1.1 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.1.10 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.1.5 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.1.6 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.1.7 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.1.9 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.2.0 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.2.1 | affected |
| IBM Corporation | Tivoli Storage Manager | 4.2.2 | affected |
| IBM Corporation | Tivoli Storage Manager | 4.2.3 | affected |
| IBM Corporation | Tivoli Storage Manager | 4.2.4 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.2.2 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.3 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.2 Client | affected |
| IBM Corporation | Tivoli Storage Manager | 5.4 Client | affected |
| IBM Corporation | Tivoli Storage Manager | 5.5.7 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.2.3.4 Client | affected |
| IBM Corporation | Tivoli Storage Manager | 5.5.1.0 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.5.1.6 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.4 | affected |
| IBM Corporation | Tivoli Storage Manager | 5.5 | affected |
| IBM Corporation | Tivoli Storage Manager | 6.1 | affected |
| IBM Corporation | Tivoli Storage Manager | 6.2 | affected |
| IBM Corporation | Tivoli Storage Manager | 6.3 | affected |
| IBM Corporation | Tivoli Storage Manager | 6.4 | affected |
| IBM Corporation | Tivoli Storage Manager | 7.1 | affected |
Weaknesses
- Obtain Information
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.