CVE-2016-9005

IBM System Storage TS3100-TS3200 Tape Library could allow an unauthenticated user with access to the company network, to change a user's password and gain remote access to the system.

• CWE-284

• http://www.ibm.com/support/docview.wss?uid=ssg1S1009656Vendor Advisory
• http://www.securityfocus.com/bid/95436Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=ssg1S1009656Vendor Advisory
• http://www.securityfocus.com/bid/95436Third Party Advisory, VDB Entry

Published

Feb 8, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8982IBM InfoSphere Information Server stores sensitive informati…
• CVE-2016-8986IBM WebSphere MQ 8.0 could allow an authenticated user with …
• CVE-2016-8987IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow an…
• CVE-2016-8998IBM Tivoli Storage Manager Server 7.1 could allow an authent…
• CVE-2016-8999IBM InfoSphere Information Server contains a Path-relative s…
• CVE-2016-9000IBM InfoSphere DataStage is vulnerable to cross-frame script…
• CVE-2016-9006IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site…
• CVE-2016-9008IBM UrbanCode Deploy could allow a malicious user to access …
• CVE-2016-9009IBM WebSphere MQ 8.0 could allow an authenticated user with …
• CVE-2016-9010IBM WebSphere Message Broker 9.0 and 10.0 could allow a remo…
• CVE-2016-9011The wmf_malloc function in api.c in libwmf 0.2.8.4 allows re…
• CVE-2016-9012CloudVision Portal (CVP) before 2016.1.2.1 allows remote aut…