CVE-2016-8942: Low severity IBM Spectrum Control vulnerability

Published Feb 1, 2017

Updated

IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the server.

Affected Software

18 affected components

IBM Spectrum Control=5.2.8

IBM Spectrum Control=5.2.9

IBM Spectrum Control=5.2.10

IBM Spectrum Control=5.2.11

IBM Tivoli Storage Productivity Center=5.2.0

IBM Tivoli Storage Productivity Center=5.2.0.0

IBM Tivoli Storage Productivity Center=5.2.1.0

IBM Tivoli Storage Productivity Center=5.2.1.1

IBM Tivoli Storage Productivity Center=5.2.2.0

IBM Tivoli Storage Productivity Center=5.2.3.0

IBM Tivoli Storage Productivity Center=5.2.4.0

IBM Tivoli Storage Productivity Center=5.2.4.1

IBM Tivoli Storage Productivity Center=5.2.4.1_\+

IBM Tivoli Storage Productivity Center=5.2.5.0

IBM Tivoli Storage Productivity Center=5.2.5.1

IBM Tivoli Storage Productivity Center=5.2.6.0

IBM Tivoli Storage Productivity Center=5.2.7.0

IBM Tivoli Storage Productivity Center=5.2.7.1

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg21995128

Event History

Feb 1, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Data Sourced

via NVD·08:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-8942?

The severity of CVE-2016-8942 is rated as medium risk due to a potential insider threat allowing limited unauthorized access.

How do I fix CVE-2016-8942?

To fix CVE-2016-8942, update IBM Tivoli Storage Productivity Center and IBM Spectrum Control to the latest patched version.

Which versions of software are affected by CVE-2016-8942?

CVE-2016-8942 affects IBM Tivoli Storage Productivity Center versions 5.2.0 through 5.2.7.1 and IBM Spectrum Control versions 5.2.8 through 5.2.11.

Can CVE-2016-8942 be exploited remotely?

No, CVE-2016-8942 requires an authenticated user with intimate knowledge of the system to exploit the vulnerability.

What are the potential impacts of CVE-2016-8942?

If exploited, CVE-2016-8942 could allow an authenticated user to modify system properties, potentially impacting system configuration and security.