CVE-2015-7408

The server in IBM Spectrum Protect (aka Tivoli Storage Manager) 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the…

published February 15, 2016

CVSS
—
EPSS
1%
Percentile
59.1
In the wild
Unconfirmed
What it is

The server in IBM Spectrum Protect (aka Tivoli Storage Manager) 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which allows remote attackers to read or write to backup data by leveraging proxy authority.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00903 · 59.1th percentile
Published
2016-02-15T02:00Z
EPSS history
Timeline
  • 15 FEB 02:00Z
    The server in IBM Spectrum Protect (aka Tivoli Storage Manager) 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the…
    cvelistv5