CVE-2003-1570: Low severity IBM Tivoli Storage Manager vulnerability
The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the server console in some circumstances, which allows remote authenticated administrators to monitor server operations by establishing a console mode session, related to "session exposure."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1570?
CVE-2003-1570 is considered a medium severity vulnerability due to the potential unauthorized access to server operations.
How do I fix CVE-2003-1570?
To fix CVE-2003-1570, update IBM Tivoli Storage Manager to version 5.2.1.2 or later or apply relevant security patches.
Which versions of IBM Tivoli Storage Manager are affected by CVE-2003-1570?
CVE-2003-1570 affects IBM Tivoli Storage Manager versions 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1.
What type of attack does CVE-2003-1570 enable?
CVE-2003-1570 enables remote authenticated administrators to observe server console operations without proper credentials.
Is it possible to mitigate CVE-2003-1570 without an update?
Mitigation without an update may be challenging, but limiting access to the server console can help reduce exposure to CVE-2003-1570.