« Volver al listado

CVE-2016-5943

Estado: ModificadaMedia (5.4)—

IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properties, via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Spectrum Control

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-5943",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.4,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-09-26T04:59:14.557",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21988625",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/93084",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21988625",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/93084",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properties, via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "IBM Spectrum Control (anteriormente Tivoli Storage Productivity Center) 5.2.x en versiones anteriores a 5.2.11 permite a usuarios remotos autenticados eludir restricciones destinadas al acceso y leer detalles de tarea o editar propiedades, a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:50:16.590",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89CB6B48-731E-432C-BE93-F91B809EE13B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F87A134-6FDE-4384-8B78-ACBABD208736"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DAC4151E-9870-4112-800E-6B63658C777F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71AD625D-FE89-4A7C-A007-B3B084FB4286"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "05DD45D2-8361-478B-87E6-E3303383B622"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99641F6F-039E-46F2-8970-DFE41552EDF2"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B5E06A8-517D-4C41-B22D-9BE75C2508E8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D4052D3-0E5D-4599-A7C7-102B9872BDF8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27BDE9FE-0F20-4CA3-BFBE-AABCFC7DA3F7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F30531B-4833-4D0A-85D8-6C58F89195E3"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7BF386B-396F-4276-9D9A-BBFAB8692896"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36ECB4CB-BCE5-4127-832E-A27BE9A4A736"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2FB125F9-9640-42BA-A414-C82BEC5BF3AE"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0F7CE21-5BDB-43C1-880E-283C60756A08"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B1A87CE3-AAFE-4AA1-9EFE-4D7A8BECA93D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:spectrum_control:5.2.10.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "076C8CAE-AC61-4513-A16F-272924D21279"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}