CVE-2016-3059

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (aka IBM Spectrum Protect for Databases) 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manager for Microsoft SQL Server (aka IBM Spectrum Protect Snapshot) 3.1 before 3.1.1.7 and 3.2 before 3.2.1.9 allow local users to discover a cleartext SQL Server password by reading the Task List in the MMC GUI.

• CWE-200

• http://www-01.ibm.com/support/docview.wss?uid=swg21987333Mitigation, Patch, Vendor Advisory
• http://www.securitytracker.com/id/1036488Third Party Advisory, VDB Entry
• http://www-01.ibm.com/support/docview.wss?uid=swg21987333Mitigation, Patch, Vendor Advisory
• http://www.securitytracker.com/id/1036488Third Party Advisory, VDB Entry

Published

Aug 8, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3052Under non-standard configurations, IBM WebSphere MQ might se…
• CVE-2016-3053IBM AIX contains an unspecified vulnerability that would all…
• CVE-2016-3054Cross-site scripting (XSS) vulnerability in IBM FileNet Work…
• CVE-2016-3055IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows rem…
• CVE-2016-3056Cross-site scripting (XSS) vulnerability in Business Space i…
• CVE-2016-3057Cross-site scripting (XSS) vulnerability in IBM Sterling B2B…
• CVE-2016-3060Payments Director in IBM Financial Transaction Manager (FTM)…
• CVE-2016-3062The mov_read_dref function in libavformat/mov.c in Libav bef…
• CVE-2016-3063Multiple functions in NetApp OnCommand System Manager before…
• CVE-2016-3064NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before …
• CVE-2016-3065The (1) brin_page_type and (2) brin_metapage_info functions …
• CVE-2016-3066The spice-gtk widget allows remote authenticated users to ob…