« Back to list

CVE-2016-6044

Status: ModifiedMedium (4.3)—

IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security policy.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

IBM — Tivoli Storage Manager

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2016-6044",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "IBM Corporation",
          "product": "Tivoli Storage Manager Extended Edition",
          "versions": [
            {
              "status": "affected",
              "version": "6.4"
            },
            {
              "status": "affected",
              "version": "7.1"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            },
            {
              "status": "affected",
              "version": "6.1"
            },
            {
              "status": "affected",
              "version": "6.2"
            },
            {
              "status": "affected",
              "version": "6.3"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-02-01T20:59:01.910",
  "references": [
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21995754",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/95091",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21995754",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/95091",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security policy."
    },
    {
      "lang": "es",
      "value": "IBM Tivoli Storage Manager Operations Center podría permitir a un atacante autenticado para habilitar o deshabilitar la APRI REST de la aplicación, lo que puede permitir que el atacante viole la política de seguridad."
    }
  ],
  "lastModified": "2026-06-17T00:50:24.427",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0CC9CE1A-7416-4F41-8699-693C161D8EE7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAC31A7A-CFFB-4590-B6B4-494F1005E4B9"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8092D853-0E6D-4104-B85B-92132D925DA8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FFF3F1D-E6F5-4CA1-9BFD-C4C4B645FB0F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1864921-DA58-433F-8DFE-BF1E25B02C58"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A89E630-36F0-4807-B4B0-C53FFB636497"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B7B9E69-407D-48E2-B49F-1C9263C052F9"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "212B26BB-0A19-41EB-811C-04C765374E8A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53CF0089-B81D-4738-85AC-E728DF77FBAF"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF39AAEE-2FC3-4ACC-AEF7-6E12EEEF0BCB"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB3B365E-0505-4A43-90A6-811D39BB6262"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B880E34D-A9B4-4A64-B734-71ADC0588761"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C3B578C6-A29A-41B6-A9B6-F7A08D9BE34B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E8CA94D1-06FB-4C94-83FB-2BC52676BBDC"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "302756E5-F3E8-4F5E-90EA-A81A88DB55AD"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C980FE7-8B2D-4ED4-A5BF-78615AD0F596"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD269C39-1070-44C3-B7FC-968C12A344E8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F7AACC13-50CF-4229-B204-E30523A38721"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "834EBEBA-70E1-4089-A064-6BBFAD50D1CB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}