CVE-2016-6044

IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security policy.

• CWE-284

• http://www.ibm.com/support/docview.wss?uid=swg21995754Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95091Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=swg21995754Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95091Third Party Advisory, VDB Entry

Published

Feb 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6037IBM Rational Team Concert (RTC) is vulnerable to HTML inject…
• CVE-2016-6038Directory traversal vulnerability in Eclipse Help in IBM Tiv…
• CVE-2016-6039IBM Jazz Reporting Service (JRS) is vulnerable to cross-site…
• CVE-2016-6040IBM Jazz Foundation could allow an authenticated user to tak…
• CVE-2016-6042IBM AppScan Enterprise Edition could allow a remote attacker…
• CVE-2016-6043Tivoli Storage Manager Operations Center could allow a local…
• CVE-2016-6045IBM Tivoli Storage Manager Operations Center is vulnerable t…
• CVE-2016-6046IBM Tivoli Storage Manager Operations Center is vulnerable t…
• CVE-2016-6047IBM Jazz Reporting Service (JRS) is vulnerable to cross-site…
• CVE-2016-6054IBM Jazz Foundation is vulnerable to cross-site scripting. T…
• CVE-2016-6055IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vuln…
• CVE-2016-6056IBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cr…