medium4.4
CVE-2017-1339
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password.
Impact
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force ID: 126247.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Tivoli Storage Manager | Versions 6.1, 6.1.0, 6.1.1, 6.1.2, 6.1.3, 6.1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=swg22007936
- http://www.securityfocus.com/bid/101113
- http://www.securitytracker.com/id/1039498
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126247
- http://www.ibm.com/support/docview.wss?uid=swg22007936
- http://www.securityfocus.com/bid/101113
- http://www.securitytracker.com/id/1039498
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126247