PT-2015-1391

CVE-2015-1949

Published

2015-06-30

Updated

2016-12-28

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack versions 6.1 through 6.1.11

Description The issue is related to a lack of input sanitization in the Tivoli Storage Manager FastBack program, which can be exploited by a remote attacker to execute arbitrary code with system privileges. The exploitation allows attackers to execute arbitrary commands with SYSTEM privileges.

Recommendations For IBM Tivoli Storage Manager FastBack versions 6.1 through 6.1.11, update to version 6.1.12 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-77: Improper Neutralization of Special Elements used in a Command (\'Command Injection\')

Related identifiers

CVE-2015-1949

BDU:2015-10486