What’s Vulnerable › Vulnerabilities

CVE-2016-8937

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-10-05 · updated 2026-06-17
• Weakness: CWE-287

Description

The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server. IBM X-Force ID: 118750.

Affected products

• IBM Corporation Tivoli Storage Manager: 6.1, 6.1.0, 6.1.1, 6.1.2, 6.1.3, 6.1.4 (+59)

References

• http://www.ibm.com/support/docview.wss?uid=swg22007935
• https://exchange.xforce.ibmcloud.com/vulnerabilities/118750
• http://www.ibm.com/support/docview.wss?uid=swg22007935
• https://exchange.xforce.ibmcloud.com/vulnerabilities/118750

Get alerted when CVE-2016-8937 or the next vulnerability affects your stack