CVE-2015-7426: OS Command Injection
The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.3.0 and Tivoli Storage FlashCopy Manager for VMware (aka Spectrum Protect Snapshot) 4.1 before 4.1.3.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7426?
The severity of CVE-2015-7426 is classified as high due to its potential impact on data confidentiality and integrity.
How do I fix CVE-2015-7426?
To fix CVE-2015-7426, upgrade to IBM Spectrum Protect for Virtual Environments 7.1.3.0 or later and Tivoli Storage FlashCopy Manager for VMware 4.1.3.0 or later.
What systems are affected by CVE-2015-7426?
CVE-2015-7426 affects IBM Spectrum Protect for Virtual Environments 7.1 (versions before 7.1.3.0) and Tivoli Storage FlashCopy Manager for VMware 4.1 (versions before 4.1.3.0).
Can CVE-2015-7426 be exploited remotely?
Yes, CVE-2015-7426 can be exploited remotely if a vulnerability in the IBM GUI is leveraged.
What are the consequences of not addressing CVE-2015-7426?
Failing to address CVE-2015-7426 may lead to unauthorized access to sensitive data and possible data loss.