description: IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 157063.
problem types: Gain Access
affected:
{
product: Spectrum Control Standard Edition
vendor: IBM
versions:
status: affected, version: 5.2.1
status: affected, version: 5.2.8
status: affected, version: 5.2.11
status: affected, version: 5.2.12
status: affected, version: 5.2.13
status: affected, version: 5.2.14
status: affected, version: 5.2.15
status: affected, version: 5.2.16
status: affected, version: 5.2.10.1
status: affected, version: 5.2.15.2
status: affected, version: 5.2.17.0
status: affected, version: 5.2.17.1
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
exploitCodeMaturity: UNPROVEN
integrityImpact: HIGH
privilegesRequired: HIGH
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 5.9
temporalSeverity: MEDIUM
userInteraction: REQUIRED
vectorString: CVSS:3.0/I:H/PR:H/UI:R/AV:N/S:U/C:H/A:H/AC:L/E:U/RL:O/RC:C
version: 3.0
]