CVE-2010-4606
Estado: ModificadaAlta (7.5)—
Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manager (TSM) 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows remote attackers to execute arbitrary commands via unknown vectors, related to a "script execution vulnerability."
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 5.07%
- Percentil entre todas las CVEs puntuadas: 92
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-noinfo
Referencias
- http://secunia.com/advisories/42639
- http://securitytracker.com/id?1024901
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC69150
- http://www.ibm.com/support/docview.wss?uid=swg21454745
- http://www.vupen.com/english/advisories/2010/3251
- http://secunia.com/advisories/42639
- http://securitytracker.com/id?1024901
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC69150
- http://www.ibm.com/support/docview.wss?uid=swg21454745
- http://www.vupen.com/english/advisories/2010/3251
JSON original (NVD)
Mostrar
{
"id": "CVE-2010-4606",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-12-29T18:00:03.867",
"references": [
{
"url": "http://secunia.com/advisories/42639",
"tags": [
"Broken Link"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1024901",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC69150",
"tags": [
"Broken Link"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg21454745",
"tags": [
"Broken Link"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2010/3251",
"tags": [
"Broken Link",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/42639",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1024901",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC69150",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg21454745",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2010/3251",
"tags": [
"Broken Link",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manager (TSM) 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows remote attackers to execute arbitrary commands via unknown vectors, related to a \"script execution vulnerability.\""
},
{
"lang": "es",
"value": "Vulnerabilidad sin especificar en el cliente Space Management en el Hierarchical Storage Management (HSM) component en IBM Tivoli Storage Manager (TSM) v 5.4.x anterior a v5.4.3.4, v5.5.x anterior a v5.5.3, v6.1.x anterior a v6.1.4, y v6.2.x anterior a v6.2.2 sobre Unix y Linux, permite a atacantes remotos ejecutar comandos de su elección a través de vectores no especificados. Relacionado con una \"vulnerabilidad de ejecución de secuencias de comandos\"."
}
],
"lastModified": "2026-06-16T23:25:09.873",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3503DC86-86A4-4E71-A582-E8AA009745E7",
"versionEndExcluding": "5.4.3.4",
"versionStartIncluding": "5.4.0"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B604BBF-7CEC-4D45-81B2-57A5480DAA03",
"versionEndExcluding": "5.5.3",
"versionStartIncluding": "5.5.0"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "749027E1-4A6C-4FA3-9636-9B9E3B0F5EE1",
"versionEndExcluding": "6.1.4",
"versionStartIncluding": "6.1.0"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "065EED8F-BC91-40F2-81D0-E47881E72AE4",
"versionEndExcluding": "6.2.2",
"versionStartIncluding": "6.2.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}