CVE-2010-4606

CWE-94Code Injection4 documents4 sources
Severity
7.5HIGH
EPSS
3.5%
top 12.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 29
Latest updateMay 17

Description

Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manager (TSM) 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows remote attackers to execute arbitrary commands via unknown vectors, related to a "script execution vulnerability."

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

NVDibm/tivoli_storage_manager5.4.05.4.3.4+3

🔴Vulnerability Details

2
GHSA
GHSA-cqrh-ggxm-7v5w: Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manager (TSM) 52022-05-17
CVEList
CVE-2010-4606: Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manager (TSM) 52010-12-29

💥Exploits & PoCs

1
Exploit-DB
South River Technologies WebDrive Service 9.02 build 2232 - Bad Security Descriptor Privilege Escalation2010-01-26
CVE-2010-4606 (HIGH CVSS 7.5) | Unspecified vulnerability in the Sp | cvebase.io