Vulnerability CVE-2009-1522
Published: 2009-05-05   Modified: 2012-02-13

Description:
The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows, when SSL is used, allows remote attackers to conduct unspecified man-in-the-middle attacks and read arbitrary files via unknown vectors.

Type:

CWE-Other

CVSS2 => (AV:N/AC:M/Au:N/C:C/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.1/10
6.9/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
None
None
Affected software
IBM -> Tivoli storage manager client 

 References:
http://www-1.ibm.com/support/docview.wss?uid=swg1IC59781
http://www-01.ibm.com/support/docview.wss?uid=swg21384389
http://xforce.iss.net/xforce/xfdb/50330
http://www.vupen.com/english/advisories/2009/1235
http://secunia.com/advisories/32604
http://osvdb.org/54235
Copyright 2024, cxsecurity.com

 

Back to Top