CVE-2016-8942

CWE-284 — Improper Access Control3 documents3 sources

Severity

3.1LOW

EPSS

0.1%

top 68.31%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Corporation Spectrum Control Standard Select Edition IBM Spectrum Control IBM Tivoli Storage Productivity Center

Timeline

PublishedFeb 1

Latest updateMay 17

Description

IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the server.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 1.6 | Impact: 1.4

Affected Packages3 packages

▶NVDibm/tivoli_storage_productivity_center14 versions+13

▶CVEListV5ibm_corporation/spectrum_control_standard_select_edition14 versions+13

▶NVDibm/spectrum_control4 versions+3

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-mxgv-84g2-jxg6: IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on↗2022-05-17

▶

CVEList

CVE-2016-8942: IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on↗2017-02-01

▶