CVE-2015-7426 — CRITICAL (10.0)

Vulnerability Description

The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.3.0 and Tivoli Storage FlashCopy Manager for VMware (aka Spectrum Protect Snapshot) 4.1 before 4.1.3.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors.

CVSS Score

10.0

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Ibm	Spectrum Protect For Virtual Environments	7.1
Ibm	Spectrum Protect Snapshot	4.1

Related Weaknesses (CWE)

CWE-78

References

http://www-01.ibm.com/support/docview.wss?uid=swg21971484Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21971484Vendor Advisory

FAQ

What is CVE-2015-7426?

CVE-2015-7426 is a vulnerability with a CVSS score of 10.0 (CRITICAL). The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.3.0 an...

How severe is CVE-2015-7426?

CVE-2015-7426 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2015-7426?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Spectrum Protect For Virtual Environments, Ibm Spectrum Protect Snapshot.