CVE-2016-5945: Medium severity ibm spectrum control vulnerability
IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to upload non-executable files via a crafted HTTP request.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5945?
The severity of CVE-2016-5945 is classified as medium, affecting IBM Spectrum Control and allowing unauthorized file uploads by authenticated users.
How do I fix CVE-2016-5945?
To fix CVE-2016-5945, upgrade IBM Spectrum Control to version 5.2.11 or later.
Who is affected by CVE-2016-5945?
CVE-2016-5945 affects users of IBM Spectrum Control versions 5.2.0 to 5.2.10, including Tivoli Storage Productivity Center.
What type of attack can be performed using CVE-2016-5945?
CVE-2016-5945 can be exploited by remote authenticated users to upload non-executable files, potentially leading to further attacks.
Is there a workaround for CVE-2016-5945 if I cannot upgrade?
There are no specific workarounds detailed for CVE-2016-5945, and upgrading to the latest version is strongly recommended.