Lucene search

IbmCVE-2015-4951

HistoryJan 20, 2016 - 5:59 a.m.

CVE-2015-4951

2016-01-2005:59:00

CWE-20

ibm

web.nvd.nist.gov

cve-2015-4951

client acceptor daemon

cad

ibm spectrum protect

tivoli storage manager

denial of service

remote attack

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.1

Confidence

High

EPSS

0.002

Percentile

56.9%

JSON

Client Acceptor Daemon (CAD) in the client in IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted Web client URL.

Affected configurations

Nvd

Node

ibmtivoli_storage_managerMatch5.5

ibmtivoli_storage_managerMatch6.1

ibmtivoli_storage_managerMatch6.2

ibmtivoli_storage_managerMatch6.3

ibmtivoli_storage_managerMatch6.4

ibmtivoli_storage_managerMatch7.1

VendorProductVersionCPE
ibmtivoli_storage_manager5.5cpe:2.3:a:ibm:tivoli_storage_manager:5.5:*:*:*:*:*:*:*
ibmtivoli_storage_manager6.1cpe:2.3:a:ibm:tivoli_storage_manager:6.1:*:*:*:*:*:*:*
ibmtivoli_storage_manager6.2cpe:2.3:a:ibm:tivoli_storage_manager:6.2:*:*:*:*:*:*:*
ibmtivoli_storage_manager6.3cpe:2.3:a:ibm:tivoli_storage_manager:6.3:*:*:*:*:*:*:*
ibmtivoli_storage_manager6.4cpe:2.3:a:ibm:tivoli_storage_manager:6.4:*:*:*:*:*:*:*
ibmtivoli_storage_manager7.1cpe:2.3:a:ibm:tivoli_storage_manager:7.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	tivoli_storage_manager	5.5	cpe:2.3:a:ibm:tivoli_storage_manager:5.5:::::::*
ibm	tivoli_storage_manager	6.1	cpe:2.3:a:ibm:tivoli_storage_manager:6.1:::::::*
ibm	tivoli_storage_manager	6.2	cpe:2.3:a:ibm:tivoli_storage_manager:6.2:::::::*
ibm	tivoli_storage_manager	6.3	cpe:2.3:a:ibm:tivoli_storage_manager:6.3:::::::*
ibm	tivoli_storage_manager	6.4	cpe:2.3:a:ibm:tivoli_storage_manager:6.4:::::::*
ibm	tivoli_storage_manager	7.1	cpe:2.3:a:ibm:tivoli_storage_manager:7.1:::::::*

References

www-01.ibm.com/support/docview.wss?uid=swg21973484

www.securitytracker.com/id/1034692

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.1

Confidence

High

EPSS

0.002

Percentile

56.9%

JSON

Related for CVE-2015-4951