PT-2014-3170 · Ibm · Data Protection For Vmware+1

Publicado 2014-05-26 · Atualizado 2017-08-29 · CVE-2013-6713

Positive Technologies (AI Summary)

CVSS v2.0

4.1

Média

Vetor base

AV:L/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Virtual Environments (TSMVE) versions 6.3 through 7.1.0.2

Description The issue concerns the Data Protection for VMware component, which fails to properly check authorization for certain operations. This allows local users to potentially obtain sensitive data or cause a denial of service by consuming disk space through unspecified actions in the graphical user interface.

Recommendations For versions 6.3 through 7.1.0.2, consider restricting access to the Data Protection for VMware component to minimize the risk of unauthorized data access or denial of service until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-6713

Produtos afetados

Data Protection For Vmware

Ibm Tivoli Storage Manager For Virtual Environments

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-6713 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89055 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21673051 · Aviso do Fabricante