CVE-2016-8940

IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these product specific database tables may allow access to passwords or other sensitive information for the product. IBM Reference #: 1998946.

• CWE-200

• http://www.ibm.com/support/docview.wss?uid=swg21998946Patch, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg21998946Patch, Vendor Advisory

Published

Mar 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8934IBM WebSphere Application Server is vulnerable to cross-site…
• CVE-2016-8935IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 a…
• CVE-2016-8936IBM Social Rendering Templates for Digital Data Connector is…
• CVE-2016-8937The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and…
• CVE-2016-8938IBM UrbanCode Deploy could allow a user to execute code usin…
• CVE-2016-8939IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1…
• CVE-2016-8941IBM Tivoli Storage Productivity Center is vulnerable to cros…
• CVE-2016-8942IBM Tivoli Storage Productivity Center could allow an authen…
• CVE-2016-8943IBM Tivoli Storage Productivity Center is vulnerable to cros…
• CVE-2016-8944IBM AIX 7.1 and 7.2 allows a local user to open a file with …
• CVE-2016-8946IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to …
• CVE-2016-8947IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a rem…