Skip to content
OpenAdvisories
Unscored CVE-2015-7408 EUVD-2015-7332GHSA-78rh-h9j3-q64m

The server in IBM Spectrum Protect (aka Tivoli Storage Manager) 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict …

Published Feb 15, 2016 · Updated Aug 6, 2024 · Assigned by ibm

Description

The server in IBM Spectrum Protect (aka Tivoli Storage Manager) 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which allows remote attackers to read or write to backup data by leveraging proxy authority.

References