CVE-2016-6043: High severity IBM Tivoli Storage Manager vulnerability
Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6043?
CVE-2016-6043 is classified as a moderate severity vulnerability due to its potential for local user exploitation.
How do I fix CVE-2016-6043?
To fix CVE-2016-6043, ensure that you update to the latest version of IBM Tivoli Storage Manager that addresses session expiration issues.
What versions of IBM Tivoli Storage Manager are affected by CVE-2016-6043?
CVE-2016-6043 affects multiple versions, including 6.4.1, 6.4.2, and several 7.1.x versions of IBM Tivoli Storage Manager.
Can CVE-2016-6043 be exploited remotely?
CVE-2016-6043 cannot be exploited remotely as it requires local user access to exploit the session expiration issue.
What impact does CVE-2016-6043 have on users?
CVE-2016-6043 allows a local user to take over another user's session if it is not properly secured due to session expiration not being enforced.