Description
IBM Tivoli Storage Manager for Virtual Environments (VMware) could disclose the Windows domain credentials to a user with a high level of privileges.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/95976
Patch, Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21995544
Scores
CVSS v3
6.8
EPSS
0.0026
EPSS Percentile
49.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (9)
ibm/tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware
7.1.3
ibm/tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware
7.1.4
ibm/tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware
7.1.4.0
ibm/tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware
7.1.6
ibm/tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware
7.1.6.2
ibm/tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware
7.1.6.3
IBM Corporation/Tivoli Storage Manager for Virtual Environments
6.3
IBM Corporation/Tivoli Storage Manager for Virtual Environments
6.4
IBM Corporation/Tivoli Storage Manager for Virtual Environments
7.1
Published
Feb 01, 2017
Tracked Since
Feb 18, 2026