CVE-2016-5943

Опубликовано: 26 сент. 2016

Источник: nvd

CVSS3: 5.4

CVSS2: 5.5

EPSS Низкий

Описание

IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properties, via unspecified vectors.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21988625
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93084
Third Party Advisory
VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21988625
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93084
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:spectrum_control:5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_control:5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_control:5.2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_control:5.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_control:5.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_control:5.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_control:5.2.4.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_control:5.2.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_control:5.2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_control:5.2.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_control:5.2.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_control:5.2.7.1:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:spectrum_control:5.2.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_control:5.2.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_control:5.2.10:*:*:*:*:*:*:*

cpe:2.3:a:ibm:spectrum_control:5.2.10.1:*:*:*:*:*:*:*

EPSS

Процентиль: 30%

0.00109

Низкий

5.4 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости

GHSA-h3g4-q7jg-pp54