Authentication Bypass in IBM Tivoli Storage Manager for Virtual Environments
CVE-2016-2988
8.5HIGH
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 25 November 2016
Summary
The vulnerability in IBM Tivoli Storage Manager for Virtual Environments allows remote authenticated users to bypass security measures that require TSM credentials. By exploiting multiple simultaneous logins, an attacker can gain unauthorized administrative access, potentially compromising system integrity and user data.
References
CVSS V3.1
Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved