NVD

Id
28025  
Name
CVE-2015-7425  
Description
The Data Protection component in the VMware vSphere GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 6.3 before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.4 and Tivoli Storage FlashCopy Manager for VMware (aka Spectrum Protect Snapshot) 3.1 before 3.1.1.3, 3.2 before 3.2.0.6, and 4.1 before 4.1.4 allows remote attackers to obtain administrative privileges via a crafted URL that triggers back-end function execution.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-02-21  
Modified Date
2016-11-28  
Seq
2015-7425  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147244 28025 CVE-2015-7425 http://www-01.ibm.com/support/docview.wss?uid=swg21973086  View
147245 28025 CVE-2015-7425 79545  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11681 JVNDB-2015-007001 複数の IBM Tivoli Storage Manager 製品の VMware vSphere GUI の Data Protection コンポーネントにおける管理権限を取得される脆弱性 IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (別名 Spectrum Protect for Virtual Environments) および Tivoli Storage FlashCopy Manager for VMware (別名 Spectrum Protect Snapshot) の VMware vSphere GUI の Data Protection コンポーネントには、管理権限を取得される脆弱性が存在します。 CVE-2015-7425 84650 CVE-2015-7425 28025 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007001.html 2015-12-11 2016-03-23 View