CVE-2020-28198

The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 (Command Line Administrative Interface, dsmadmc.exe) is vulnerable to an exploitable stack…

published May 6, 2021

CVSS
—
EPSS
0%
Percentile
34.8
In the wild
Unconfirmed
What it is

The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 (Command Line Administrative Interface, dsmadmc.exe) is vulnerable to an exploitable stack buffer overflow. Note: the vulnerability can be exploited when it is used in "interactive" mode while, cause of a max number characters limitation, it cannot be exploited in batch or command line usage (e.g. dsmadmc.exe -id=username -password=pwd). NOTE: This vulnerability only affects products that are no longer supported by the maintainer

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00415 · 34.8th percentile
Published
2021-05-06T19:25Z
EPSS history
Timeline
  • 06 MAY 19:25Z
    The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 (Command Line Administrative Interface, dsmadmc.exe) is vulnerable to an exploitable stack…
    cvelistv5