PT-2014-2919 · Microsoft+1 · Windows+2

Publicado 2014-01-23 · Atualizado 2017-08-29 · CVE-2013-5371

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager (TSM) versions 6.3.1 through 6.4.0

Description The issue concerns the client in IBM Tivoli Storage Manager (TSM) on Windows, where it fails to preserve permissions of Resilient File System (ReFS) files during backup and restore operations. This allows local users to bypass intended access restrictions through standard filesystem operations.

Recommendations For versions 6.3.1 and 6.4.0, update to a version that preserves file permissions across backup and restore operations to prevent access restriction bypass.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-5371

Produtos afetados

Ibm Tivoli Storage Manager

Refs

Windows

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/86661 · Nota
• http://ibm.com/support/docview.wss?uid=swg21662608 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-5371 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC92933 · Aviso do Fabricante