CVE-2016-8940
Estado: ModificadaAlta (8.8)—
IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these product specific database tables may allow access to passwords or other sensitive information for the product. IBM Reference #: 1998946.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.94%
- Percentil entre todas las CVEs puntuadas: 60
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-200
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2016-8940",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 8.8,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "IBM Corporation",
"product": "Tivoli Storage Manager",
"versions": [
{
"status": "affected",
"version": "5.3.5.3"
},
{
"status": "affected",
"version": "5.4.1.2"
},
{
"status": "affected",
"version": "4.2"
},
{
"status": "affected",
"version": "4.2.1"
},
{
"status": "affected",
"version": "5.1.8"
},
{
"status": "affected",
"version": "5.2.5.1"
},
{
"status": "affected",
"version": "5.2.7"
},
{
"status": "affected",
"version": "5.2.8"
},
{
"status": "affected",
"version": "5.2.9"
},
{
"status": "affected",
"version": "5.3.0"
},
{
"status": "affected",
"version": "5.3.1"
},
{
"status": "affected",
"version": "5.3.2"
},
{
"status": "affected",
"version": "5.3.3"
},
{
"status": "affected",
"version": "5.4.4.0"
},
{
"status": "affected",
"version": "5.4.2.4"
},
{
"status": "affected",
"version": "5.4.2.3"
},
{
"status": "affected",
"version": "5.4.2.2"
},
{
"status": "affected",
"version": "5.3.6.9"
},
{
"status": "affected",
"version": "5.3.6.2"
},
{
"status": "affected",
"version": "5.3.6.1"
},
{
"status": "affected",
"version": "5.3.4"
},
{
"status": "affected",
"version": "5.2.5.3"
},
{
"status": "affected",
"version": "5.2.5.2"
},
{
"status": "affected",
"version": "5.2.4"
},
{
"status": "affected",
"version": "5.3.5.1"
},
{
"status": "affected",
"version": "5.3.2.4"
},
{
"status": "affected",
"version": "6.0"
},
{
"status": "affected",
"version": "5.1.0"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "5.1.10"
},
{
"status": "affected",
"version": "5.1.5"
},
{
"status": "affected",
"version": "5.1.6"
},
{
"status": "affected",
"version": "5.1.7"
},
{
"status": "affected",
"version": "5.1.9"
},
{
"status": "affected",
"version": "5.2.0"
},
{
"status": "affected",
"version": "5.2.1"
},
{
"status": "affected",
"version": "4.2.2"
},
{
"status": "affected",
"version": "4.2.3"
},
{
"status": "affected",
"version": "4.2.4"
},
{
"status": "affected",
"version": "5.2.2"
},
{
"status": "affected",
"version": "5.3"
},
{
"status": "affected",
"version": "5.2 Client"
},
{
"status": "affected",
"version": "5.4 Client"
},
{
"status": "affected",
"version": "5.5.7"
},
{
"status": "affected",
"version": "5.2.3.4 Client"
},
{
"status": "affected",
"version": "5.5.1.0"
},
{
"status": "affected",
"version": "5.5.1.6"
},
{
"status": "affected",
"version": "5.4"
},
{
"status": "affected",
"version": "5.5"
},
{
"status": "affected",
"version": "6.1"
},
{
"status": "affected",
"version": "6.2"
},
{
"status": "affected",
"version": "6.3"
},
{
"status": "affected",
"version": "6.4"
},
{
"status": "affected",
"version": "7.1"
}
]
}
]
}
],
"published": "2017-03-07T17:59:00.150",
"references": [
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg21998946",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg21998946",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these product specific database tables may allow access to passwords or other sensitive information for the product. IBM Reference #: 1998946."
},
{
"lang": "es",
"value": "IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3 y 7.1 no realiza comprobación de autoridad suficiente en consultas SQL. Como resultado, un atacante puede enviar consultas SQL que acceden a tablas de bases de datos que no están destinadas para el acceso o uso por administradores. El acceso a estas tablas de bases de datos de productos específicas puede permitir acceso a contraseñas u otra información sensible para el producto. Referencia de IBM #: 1998946."
}
],
"lastModified": "2026-06-17T00:55:13.107",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E11F79C4-D61F-481B-9BDC-ADEDE1494AAD"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76EC7D2D-4B0A-4CDF-A523-85ABEF05D211"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C7DD9CE-0E95-45BB-9BB5-07652C9FD6C1"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F3F3288-4280-43DA-B6E4-8240137105AD"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90CAA216-D0B3-4ECB-8BBE-5288DE590DE6"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10524DD7-E9F2-498C-93F1-54F2C47AAEBB"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "863D87DB-64FD-4C97-9CAD-48ED2A298FA5"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "295AD957-904D-4917-BCDD-27E5E4AD9E27"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF7DA554-D2AE-45FF-AEB9-551F9AD9C9B8"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.5.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C05C02E3-24CC-496C-912E-951A1541F7AC"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45172E20-5E12-435E-815F-D543C9B6BD41"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9625017C-311D-423A-BFF8-AEB4CE7766FE"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3538EBB1-A960-4CE7-B07D-17CAFF9F3564"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19A53C1A-0B43-4EB8-B489-742AAD1D4379"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92592FF3-70F2-4C48-A2A0-C5C8E8DCC649"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF7A543F-FD79-42C8-9DAF-2DD549926DDA"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A018347-E8E9-4CCC-B118-247D9064D768"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D406098E-B724-4E5F-8B47-60B4FAE1B6AE"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3707B2DD-1855-4094-B0B5-C1204EBB221C"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "122C35D5-BF80-4DE4-861D-C7D6D4D56777"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "581F420E-BBA2-4302-B8A1-ED8BFE78155E"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26CE2C13-53F7-4A4D-9DDC-0E00B0263858"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BEFCB76-C69E-4168-9A2E-A258B7E44F23"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7687A0AB-E864-4E23-8A5F-54AD38A69B84"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F35C20CF-CB82-46D7-A4D0-FFD277B7ECB9"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B27F038-ADB0-4052-8264-C0816194DB1E"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D8E5AD5-EDF3-432E-A7F8-0D3E9ED91033"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "212B26BB-0A19-41EB-811C-04C765374E8A"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1..5.100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C934CA2-8606-479E-AA9F-AB70E7BB30FD"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53CF0089-B81D-4738-85AC-E728DF77FBAF"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF39AAEE-2FC3-4ACC-AEF7-6E12EEEF0BCB"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C71F01C8-C1BB-4E93-8AE8-A1B5131310B8"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C59C16BD-1CB8-47BB-8352-B1609798BB0C"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB3B365E-0505-4A43-90A6-811D39BB6262"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B880E34D-A9B4-4A64-B734-71ADC0588761"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6A07C8F-4DD0-4767-8A8F-A1721EBDE583"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D972077-A132-430D-97E6-8F0F8B0F79B1"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.300:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DC78448-7AD8-438B-8AFC-79B31FB706D1"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C3B578C6-A29A-41B6-A9B6-F7A08D9BE34B"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FC3FEDA-B353-4C31-A349-1A12F4FAF465"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8CA94D1-06FB-4C94-83FB-2BC52676BBDC"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "302756E5-F3E8-4F5E-90EA-A81A88DB55AD"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.3.100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D92EDDEE-1135-4EE7-972E-19471352E0A8"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C980FE7-8B2D-4ED4-A5BF-78615AD0F596"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD269C39-1070-44C3-B7FC-968C12A344E8"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7AACC13-50CF-4229-B204-E30523A38721"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1AC65208-F124-4D28-B5D8-3A3C774C82A6"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.5.200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E782420B-2A62-4537-88EB-1169C73AC21B"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "998D4B2B-7563-4885-994F-D9F56D62F888"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:7.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "834EBEBA-70E1-4089-A064-6BBFAD50D1CB"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}