CVE-2015-7408

Опубликовано: 15 фев. 2016

Источник: nvd

CVSS3: 3.7

CVSS2: 2.6

EPSS Низкий

Описание

The server in IBM Spectrum Protect (aka Tivoli Storage Manager) 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which allows remote attackers to read or write to backup data by leveraging proxy authority.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg1IT13609
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21975957
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IT13609
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21975957
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:tivoli_storage_manager:5.5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:6.1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:6.2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:6.3.3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:6.3.4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:6.3.5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 41%

0.00196

Низкий

3.7 Low

CVSS3

2.6 Low

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-78rh-h9j3-q64m