CVE-2015-1949

EUVD-2015-2054
The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands with SYSTEM privileges via unspecified vectors.
Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
Affected Products (NVD)
VendorProductVersion
ibmtivoli_storage_manager_fastback
6.1.0.0
ibmtivoli_storage_manager_fastback
6.1.1.0
ibmtivoli_storage_manager_fastback
6.1.7.2
ibmtivoli_storage_manager_fastback
6.1.8.0
ibmtivoli_storage_manager_fastback
6.1.8.1
ibmtivoli_storage_manager_fastback
6.1.9.0
ibmtivoli_storage_manager_fastback
6.1.9.1
ibmtivoli_storage_manager_fastback
6.1.10.0
ibmtivoli_storage_manager_fastback
6.1.10.1
ibmtivoli_storage_manager_fastback
6.1.11.0
ibmtivoli_storage_manager_fastback
6.1.11.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg21959398
http://www.securityfocus.com/bid/75459
http://www.securitytracker.com/id/1032773
http://www.zerodayinitiative.com/advisories/ZDI-15-271
http://www-01.ibm.com/support/docview.wss?uid=swg21959398
http://www.securityfocus.com/bid/75459
http://www.securitytracker.com/id/1032773
http://www.zerodayinitiative.com/advisories/ZDI-15-271