6.4.2

DATE	CVE	VULNERABILITY TITLE	RISK
2017-02-01	CVE-2016-6044	Improper Access Control vulnerability in IBM Tivoli Storage Manager IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security policy. network low complexity ibm CWE-284	4.3
2017-02-01	CVE-2016-6043	Session Fixation vulnerability in IBM Tivoli Storage Manager Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced. local high complexity ibm CWE-384	7.0
2017-02-01	CVE-2016-5985	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in IBM Tivoli Storage Manager The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. local low complexity ibm CWE-119	7.8