PT-2014-3171 · Ibm · Ibm Tivoli Storage Flashcopy Manager

Publicado 2014-05-26 · Atualizado 2017-08-29 · CVE-2013-6714

Positive Technologies (AI Summary)

CVSS v2.0

4.1

Média

Vetor base

AV:L/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage FlashCopy Manager versions 3.1 through 4.1.0.1

Description The issue concerns the FlashCopy Manager for VMware component, which fails to properly check authorization for certain operations. This allows local users to potentially obtain sensitive data or cause a denial of service, such as data overwrite or disk consumption, by performing unspecified actions through the GUI.

Recommendations For versions 3.1 through 4.1.0.1, consider restricting access to the FlashCopy Manager for VMware component to minimize the risk of unauthorized data access or denial of service until a proper fix is applied. As a temporary workaround, limit local user privileges to prevent potential exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-6714

Produtos afetados

Ibm Tivoli Storage Flashcopy Manager

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21673045 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-6714 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89057 · Nota