CVE-2015-8522

9.8CRITICAL

Key Information:

Vendor
IBM
Status
Tivoli Storage Manager Fastback
Vendor
CVE Published:
5 April 2016

Summary

Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a crafted command, a different vulnerability than CVE-2015-8519, CVE-2015-8520, and CVE-2015-8521.

References

http://www.securityfocus.com/bid/84163
vdb-entryx_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg21975536
x_refsource_CONFIRM

EPSS Score

82% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.