CVE-2015-8521

CRITICAL

IBM Tivoli Storage Manager FastBack <6.1.12.2 - RCE

Title source: llm
STIX 2.1

Description

Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a crafted command, a different vulnerability than CVE-2015-8519, CVE-2015-8520, and CVE-2015-8522.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/84167
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21975536

Scores

CVSS v3 9.8
EPSS 0.0277
EPSS Percentile 84.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (35)
ibm/tivoli_storage_manager_fastback 5.5.0
ibm/tivoli_storage_manager_fastback 6.1.0
ibm/tivoli_storage_manager_fastback 6.1.0.1
ibm/tivoli_storage_manager_fastback 6.1.1
ibm/tivoli_storage_manager_fastback 6.1.1.0
ibm/tivoli_storage_manager_fastback 6.1.2
ibm/tivoli_storage_manager_fastback 6.1.2.0
ibm/tivoli_storage_manager_fastback 6.1.3
ibm/tivoli_storage_manager_fastback 6.1.3.0
ibm/tivoli_storage_manager_fastback 6.1.4
... and 25 more
Published Apr 05, 2016
Tracked Since Feb 18, 2026