CVE-2016-6046: XSS
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6046?
CVE-2016-6046 is classified as a moderate severity vulnerability due to its potential for credential disclosure.
How do I fix CVE-2016-6046?
To fix CVE-2016-6046, upgrade to the latest version of IBM Tivoli Storage Manager that addresses the cross-site scripting vulnerability.
What software versions are affected by CVE-2016-6046?
CVE-2016-6046 affects IBM Tivoli Storage Manager versions 6.4.1, 6.4.2, and 7.1 among others.
Can CVE-2016-6046 lead to data theft?
Yes, CVE-2016-6046 can potentially lead to data theft by allowing arbitrary JavaScript code execution, which could disclose user credentials.
Is CVE-2016-6046 a local or remote vulnerability?
CVE-2016-6046 is considered a remote vulnerability as it can be exploited through the web interface.