Boletines de Vulnerabilidades

IBM Security Bulletin: Tivoli Storage Manager for Virtual Environments: Data Protection for VMware and Tivoli Storage FlashCopy Manager for VMware affected by unauthorized access vulnerability (CVE-20

   
Software afectado IBM
 
The Data Protection for VMware vSphere GUI component of IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (IBM Spectrum Protect for Virtual Environments) and the IBM Tivoli Storage FlashCopy Manager for VMware GUI component of IBM Tivoli Storage FlashCopy Manager for VMware (IBM Spectrum Protect Snapshot) are both subject to an unauthenticated user submitting a URL pattern that can cause back end functions to be executed. This can result in an attacker gaining

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware_and_tivoli_storage_flashcopy_manager_for_vmware_affected_by_unauthorized_access_vulnerability_cve_2