CVE-2016-5927

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IT15203Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21989006Patch, Vendor Advisory
http://www.securityfocus.com/bid/92723
http://www-01.ibm.com/support/docview.wss?uid=swg1IT15203Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21989006Patch, Vendor Advisory
http://www.securityfocus.com/bid/92723

Timeline

Published: Sep 12, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-59325.4IBM Connections 4.0, 4.5, 5.0, and 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript CVE-2016-59334.6IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall CVE-2016-59347.3IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. By placing a specially-CVE-2016-59355.9IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate th CVE-2016-59378.8IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthor CVE-2016-59383.3IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system.CVE-2016-59396.3IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the CVE-2016-59405.4IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web CVE-2016-59415.7IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL CVE-2016-59425.4IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web CVE-2016-59435.4IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to bypass intended CVE-2016-59445.4Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.