6.3.3

DATE	CVE	VULNERABILITY TITLE	RISK
2017-10-05	CVE-2017-1378	Insufficiently Protected Credentials vulnerability in IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. local low complexity ibm CWE-522	7.8
2017-10-05	CVE-2017-1339	Use of a Broken or Risky Cryptographic Algorithm vulnerability in IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. local low complexity ibm CWE-327	4.4
2017-10-05	CVE-2017-1301	Link Following vulnerability in IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. local low complexity ibm CWE-59	5.5
2017-10-05	CVE-2016-8937	Improper Authentication vulnerability in IBM Tivoli Storage Manager The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information during authentication. network low complexity ibm CWE-287 critical	9.8
2017-06-07	CVE-2016-8939	Information Exposure vulnerability in IBM Tivoli Storage Manager IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be compromised. local low complexity ibm CWE-200	5.5
2017-03-07	CVE-2016-8940	Information Exposure vulnerability in IBM Tivoli Storage Manager IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. network low complexity ibm CWE-200	8.8