CVE-2003-1570

Опубликовано: 31 мар. 2009

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the server console in some circumstances, which allows remote authenticated administrators to monitor server operations by establishing a console mode session, related to "session exposure."

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:tivoli_storage_manager:5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:5.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:5.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:5.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:5.1.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:5.1.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:5.1.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:5.1.10:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00301

Низкий

3.5 Low

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-p3g3-mx33-cm6q

github

больше 3 лет назад