CVE-2016-8940

State: Published
Severity: Not scored
Published: Mar 7, 2017
Updated: Aug 6, 2024
Reserved: Oct 25, 2016

Description

IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these product specific database tables may allow access to passwords or other sensitive information for the product. IBM Reference #: 1998946.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Tivoli Storage ManagerIBM Corporation	5.3.5.3Affected 5.4.1.2Affected 4.2Affected 4.2.1Affected 5.1.8Affected 5.2.5.1Affected 5.2.7Affected 5.2.8Affected 5.2.9Affected 5.3.0Affected 5.3.1Affected 5.3.2Affected 5.3.3Affected 5.4.4.0Affected 5.4.2.4Affected 5.4.2.3Affected 5.4.2.2Affected 5.3.6.9Affected 5.3.6.2Affected 5.3.6.1Affected 5.3.4Affected 5.2.5.3Affected 5.2.5.2Affected 5.2.4Affected 5.3.5.1Affected and 29 more versions

References

http://www.ibm.com/support/docview.wss?uid=swg21998946

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.