Description
The Web GUI in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors.
References
- IC87210 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21624118
- tsm-gui-unauth-access(81216) vdb-entry