CVE-2015-4951
Last modified
CVE-2015-4951 is a vulnerability of currently unknown severity. Client Acceptor Daemon (CAD) in the client in IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted Web client URL.. EPSS estimates a 1.35% chance of exploitation in the next 30 days.
Description
Client Acceptor Daemon (CAD) in the client in IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted Web client URL.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Tivoli Storage Manager | 5.5 |
| Ibm | Tivoli Storage Manager | 6.1 |
| Ibm | Tivoli Storage Manager | 6.2 |
| Ibm | Tivoli Storage Manager | 6.3 |
| Ibm | Tivoli Storage Manager | 6.4 |
| Ibm | Tivoli Storage Manager | 7.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-4951?
How severe is CVE-2015-4951?
How do I fix CVE-2015-4951?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-4945Unspecified vulnerability in the IBM Maximo Anywhere applica…
- CVE-2015-4946Rational LifeCycle Project Administration in Jazz Team Serve…
- CVE-2015-4947Stack-based buffer overflow in the Administration Server in …
- CVE-2015-4948netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a …
- CVE-2015-4949IBM Tivoli Storage Manager for Databases: Data Protection fo…
- CVE-2015-4950The mailbox-restore feature in IBM Tivoli Storage Manager fo…
- CVE-2015-4952The on-demand plugin in IBM Endpoint Manager for Remote Cont…
- CVE-2015-4953IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-…
- CVE-2015-4954IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-…
- CVE-2015-4955Cross-site scripting (XSS) vulnerability in IBM Business Pro…
- CVE-2015-4956The Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 …
- CVE-2015-4957Cross-site scripting (XSS) vulnerability in the Web UI in IB…
Are you affected by CVE-2015-4951?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST