CVE-2009-1521
Estado: ModificadaAlta (7.5)—
Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17, and the TSM Express client 5.3.3.0 through 5.3.6.5, allows attackers to read or modify arbitrary files via unknown vectors.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.66%
- Percentil entre todas las CVEs puntuadas: 76
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- NVD-CWE-noinfo
Referencias
- http://secunia.com/advisories/32604
- http://www-01.ibm.com/support/docview.wss?uid=swg21384389
- http://www-1.ibm.com/support/docview.wss?uid=swg1IC59779
- http://www.vupen.com/english/advisories/2009/1235
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50329
- http://secunia.com/advisories/32604
- http://www-01.ibm.com/support/docview.wss?uid=swg21384389
- http://www-1.ibm.com/support/docview.wss?uid=swg1IC59779
- http://www.vupen.com/english/advisories/2009/1235
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50329
JSON original (NVD)
Mostrar
{
"id": "CVE-2009-1521",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": true,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2009-05-05T17:30:00.297",
"references": [
{
"url": "http://secunia.com/advisories/32604",
"source": "cve@mitre.org"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21384389",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1IC59779",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2009/1235",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50329",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/32604",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21384389",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1IC59779",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2009/1235",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50329",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17, and the TSM Express client 5.3.3.0 through 5.3.6.5, allows attackers to read or modify arbitrary files via unknown vectors."
},
{
"lang": "es",
"value": "Vulnerabilidad inespecífica en Java GUI en el cliente IBM Tivoli Storage Manager (TSM) desde v5.2.0.0 hasta v5.2.5.3, desde v5.3.0.0 hasta v5.3.6.5, desde v5.4.0.0 hasta v5.4.2.6, y desde v5.5.0.0 hasta v5.5.1.17, y el cliente TSM Express desde v5.3.3.0 hasta v5.3.6.5, permite a atacantes remotos leer o modificar ficheros de forma arbitraria a través de vectores desconocidos."
}
],
"lastModified": "2026-06-16T23:07:26.553",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "628DBF06-F69A-4912-B0D8-DEE9EFD830AC"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A077B803-1CB7-4068-9C03-6E10D24D82A3"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D6A5DEA-1308-4A36-B7CF-4F8B6CEB5994"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F3EE328-1E1E-4D20-B41A-D381D5E60D4F"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF328830-D1B6-462F-B504-C85495D14229"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4881A76F-B6DB-4E9E-90C4-C2773A698EB8"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0832F6E5-99D1-4A27-A308-BDF637F9C417"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93E31155-39D3-4EB5-988E-7AAB83C6A3AF"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4371D56F-F69B-421A-A098-BFD965636B32"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C2775F4-0353-4FEE-89BA-BE18BB933BCB"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6A3EF8F-A50D-4C8F-ABFF-73AF3F265F14"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2D721F7-B62A-48C8-9D6D-A69E24AE94BB"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77A527E6-7428-43C6-A313-2B4D4ED9811E"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABB38022-F071-4ACB-A720-53766F20BDDB"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C65A37A-AB50-4325-A0BF-E99F46463A40"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_client:5.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD4C86D9-79E2-49C7-AD10-48FB2E4CDF6E"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5E6A344-E062-4179-9CFA-CF912B4AED16"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}