CVE-2003-1570
The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1...
The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the server console in some circumstances, which allows remote authenticated administrators to monitor server operations by establishing a console mode session, related to "session exposure."
Exploit likelihood
What each source reports
NVD Score used
The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the server console in some circumstances, which allows remote authenticated administrators to monitor server operations by establishing a console mode session, related to "session exposure."
- Record
CVE-2003-1570- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:P/I:N/A:N - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the server console in some circumstances, which allows remote authenticated administrators to monitor server operations by establishing a console mode session, related to "session exposure."
- Record
CVE-2003-1570- Updated
- 2026-11-02
EUVDEUVD-2003-1560 No score
The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the server console in some circumstances, which allows remote authenticated administrators to monitor server operations by establishing a console mode session, related to "session exposure."
- Record
EUVD-2003-1560- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p3g3-mx33-cm6q No score
The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1...
The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the server console in some circumstances, which allows remote authenticated administrators to monitor server operations by establishing a console mode session, related to "session exposure."
- Record
GHSA-p3g3-mx33-cm6q- Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-1570 is a low vulnerability (CVSS 3.5) in Ibm Tivoli Storage Manager, published March 31, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.00%, the 62nd percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/49536
vupen.com/english/advisories/2009/0881
www-01.ibm.com/support/docview.wss?uid=swg21375360
securityfocus.com/bid/34285
securitytracker.com/id?1021947
www-1.ibm.com/support/docview.wss?uid=swg1IC37554
secunia.com/advisories/34498
nvd.nist.gov/vuln/detail/CVE-2003-1570
github.com/advisories/GHSA-p3g3-mx33-cm6q