CVE-2011-1372

2011-11-2811:55:08

CWE-287

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.005

Percentile

75.8%

JSON

The Web User Interface on the IBM TS3100 and TS3200 tape libraries with firmware before A.60 allows remote attackers to bypass authentication and obtain administrative access via unspecified vectors.

Affected configurations

Nvd

Node

ibmts3100_tape_library_firmwareRange≤a.40

ibmts3200_tape_library_firmwareRange≤a.40

AND

ibmts3100_tape_library

ibmts3200_tape_library

VendorProductVersionCPE
ibmts3100_tape_library_firmware*cpe:2.3:a:ibm:ts3100_tape_library_firmware:*:*:*:*:*:*:*:*
ibmts3200_tape_library_firmware*cpe:2.3:a:ibm:ts3200_tape_library_firmware:*:*:*:*:*:*:*:*
ibmts3100_tape_library*cpe:2.3:h:ibm:ts3100_tape_library:*:*:*:*:*:*:*:*
ibmts3200_tape_library*cpe:2.3:h:ibm:ts3200_tape_library:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	ts3100_tape_library_firmware	*	cpe:2.3:a:ibm:ts3100_tape_library_firmware::::::::
ibm	ts3200_tape_library_firmware	*	cpe:2.3:a:ibm:ts3200_tape_library_firmware::::::::
ibm	ts3100_tape_library	*	cpe:2.3:h:ibm:ts3100_tape_library::::::::
ibm	ts3200_tape_library	*	cpe:2.3:h:ibm:ts3200_tape_library::::::::