CVE-2016-0371: Medium severity IBM Tivoli Storage Manager vulnerability
Published Feb 1, 2017
·Updated
The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while application tracing is enabled.
Affected Software
27 affected components
IBM Tivoli Storage Manager>=7.1.0.0<=7.1.6.2
Apple iOS and macOS
HP HP-UX
IBM AIX
Linux Linux kernel
Microsoft Windows
Oracle Solaris
IBM Tivoli Storage Manager>=6.4.0.0<=6.4.3.3
IBM Tivoli Storage Manager>=5.5<=6.3.2.5
All of the following
IBM Tivoli Storage Manager>=7.1.0.0<=7.1.6.2
Any of the following
HP HP-UX
IBM AIX
Linux Linux kernel
Microsoft Windows
Oracle Solaris
All of the following
IBM Tivoli Storage Manager>=6.4.0.0<=6.4.3.3
Any of the following
HP HP-UX
IBM AIX
Linux Linux kernel
Microsoft Windows
Oracle Solaris
All of the following
IBM Tivoli Storage Manager>=5.5<=6.3.2.5
Any of the following
HP HP-UX
IBM AIX
Linux Linux kernel
Microsoft Windows
Oracle Solaris
Remediation
Patch Available
Event History
Feb 1, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Data Sourced
via NVD·09:59 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-0371?
CVE-2016-0371 is rated as moderate due to the potential exposure of sensitive information.
2
How do I fix CVE-2016-0371?
To mitigate CVE-2016-0371, disable application tracing or upgrade to a version of IBM Tivoli Storage Manager that addresses this vulnerability.
3
Which software versions are affected by CVE-2016-0371?
CVE-2016-0371 affects IBM Tivoli Storage Manager versions between 5.5 and 7.1.6.2.
4
What kind of information is exposed in CVE-2016-0371?
CVE-2016-0371 can expose user passwords in plain text through application trace output.
5
Is CVE-2016-0371 relevant for non-IBM systems?
No, CVE-2016-0371 specifically affects IBM Tivoli Storage Manager and does not impact other systems.