NVD

Id
28029  
Name
CVE-2015-7429  
Description
The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.4 and Tivoli Storage FlashCopy Manager for VMware (aka Spectrum Protect Snapshot) 4.1 before 4.1.4 allows remote authenticated users to restore arbitrary virtual machines and consequently obtain sensitive information by visiting the vSphere inventory.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-01-02  
Modified Date
2016-11-28  
Seq
2015-7429  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147250 28029 CVE-2015-7429 http://www-01.ibm.com/support/docview.wss?uid=swg21973087  View
147251 28029 CVE-2015-7429 79541  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11337 JVNDB-2015-006657 複数の IBM Tivoli Storage Manager 製品の VMware GUI の Data Protection 拡張機能における任意の仮想マシンを復元される脆弱性 IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (別名 Spectrum Protect for Virtual Environments) および Tivoli Storage FlashCopy Manager for VMware (別名 Spectrum Protect Snapshot) の VMware GUI の Data Protection 拡張機能には、任意の仮想マシンを復元され、その結果、重要な情報を取得される脆弱性が存在します。 CVE-2015-7429 84654 CVE-2015-7429 28029 4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006657.html 2015-12-11 2016-01-08 View