Skip to main content

Tivoli Storage Manager Fastback CVE-2015-1941

HIGH
Information Exposure (CWE-200)
2015-06-30 psirt@us.ibm.com
7.8
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:N/AC:L/Au:N/C:C/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:C/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Jun 30, 2015 - 15:59 cve.org
HIGH 7.8

DescriptionCVE.org

The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to read arbitrary files via a crafted TCP packet to an unspecified port.

AnalysisAI

The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to read arbitrary files via a crafted TCP packet to an unspecified port. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Exposure of Sensitive Information (CWE-200), which allows attackers to access sensitive data that should not be disclosed. The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to read arbitrary files via a crafted TCP packet to an unspecified port. Affected products include: Ibm Tivoli Storage Manager Fastback. Version information: before 6.1.12.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Minimize information in error messages, implement proper access controls, encrypt sensitive data at rest and in transit.

CVE-2015-1930 HIGH POC
7.8 Jun 30

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attacke

CVE-2015-1896 CRITICAL
10.0 May 25

Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allo

CVE-2015-1986 CRITICAL
10.0 Jun 30

The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary command

CVE-2015-4932 CRITICAL
10.0 Aug 03

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attac

CVE-2015-4931 CRITICAL
10.0 Aug 03

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attac

CVE-2015-4935 CRITICAL
10.0 Aug 03

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attac

CVE-2015-4934 CRITICAL
10.0 Aug 03

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attac

CVE-2015-4933 CRITICAL
10.0 Aug 03

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attac

CVE-2015-1949 CRITICAL
10.0 Jun 30

The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary command

CVE-2015-1938 CRITICAL
10.0 Jun 30

The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary command

CVE-2015-8522 CRITICAL
9.8 Apr 05

Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attacke

CVE-2015-8521 CRITICAL
9.8 Apr 05

Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attacke

Share

CVE-2015-1941 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy