CVE-2016-8937
CriticalSummary
The default authentication protocol in IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server.
Risk Assessment
The organization may be exposed to unauthorized access to the system, potentially leading to data loss or security breaches.
Recommendation
It is recommended to update to the latest version of the software and implement additional security measures, such as limiting login attempts.
Original NVD description (English source)
The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server. IBM X-Force ID: 118750.