Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.1
CVE-2016-8942: IBM Tivoli Storage Productivity Center lets knowledgeable users change settings
CVE-2016-8942 · published 9 years ago
Summary
If someone who is already signed in and knows the system well logs in, they can modify a small group of server settings in IBM Tivoli Storage Productivity Center. This could alter how storage is managed or reported. Limit who can log in, review user permissions regularly, and apply any available updates from IBM.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ibm | spectrum_control |
5.2.8 5.2.9 5.2.10 5.2.11 cpe:2.3:a:ibm:spectrum_control:5.2.8:*:*:*:*:*:*:* |
| ibm | tivoli_storage_productivity_center |
5.2.0 5.2.0.0 5.2.1.0 5.2.1.1 5.2.2.0 5.2.3.0 5.2.4.0 5.2.4.1 5.2.4.1_\+ 5.2.5.0 5.2.5.1 5.2.6.0 2 more version ranges
cpe:2.3:a:ibm:tivoli_storage_productivity_center:5.2.0:*:*:*:*:*:*:* |
Original advisory text
IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the server.
IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the server.
References
- http://www.ibm.com/support/docview.wss?uid=swg21995128 Patch Vendor Advisory
- http://www.securityfocus.com/bid/94916 Third Party Advisory VDB Entry
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-284Improper Access Control
Timeline
Published1 Feb 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2016-8942 · NVD
Track software like this
Free during beta