Vulnerabilities > IBM > Tivoli Storage Manager > 6.2.5.4

DATE CVE VULNERABILITY TITLE RISK
2017-05-05 CVE-2016-8916 Information Exposure vulnerability in IBM Tivoli Storage Manager
IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set password command is issued.
local
low complexity
ibm CWE-200
5.5
2017-02-01 CVE-2016-6110 Credentials Management vulnerability in IBM Tivoli Storage Manager
IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user.
local
low complexity
ibm CWE-255
6.5
2017-02-01 CVE-2016-0371 Unspecified vulnerability in IBM Tivoli Storage Manager
The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while application tracing is enabled.
local
low complexity
ibm
5.5
2017-02-01 CVE-2016-5985 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in IBM Tivoli Storage Manager
The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled.
local
low complexity
ibm CWE-119
7.8