CVE-2016-8939

MEDIUM

IBM Tivoli Storage Manager - Info Disclosure

Title source: llm

Description

IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790.

References (5)

[Vendor Advisory] http://www.ibm.com/support/docview.wss?uid=swg22003738

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/98783

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1038607

[VDB Entry, Vendor Advisory] https://exchange.xforce.ibmcloud.com/vulnerabilities/118790

[Various Sources] https://improsec.com/blog/vulnerability-in-tsm

Scores

CVSS v3 5.5

EPSS 0.0007

EPSS Percentile 22.1%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (50)

ibm/tivoli_storage_manager

... and 40 more

Published Jun 07, 2017

Tracked Since Feb 18, 2026