PT-2014-6136 · Ibm · Ibm Tivoli Storage Manager

Publicado 2014-11-18 · Atualizado 2017-08-29 · CVE-2014-4817

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager (TSM) versions 5.x through 6.x before 6.3.5.10 IBM Tivoli Storage Manager (TSM) versions 7.x before 7.1.1.100

Description The issue allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename.

Recommendations For versions 5.x through 6.x before 6.3.5.10, update to version 6.3.5.10 or later. For versions 7.x before 7.1.1.100, update to version 7.1.1.100 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-4817

Produtos afetados

Ibm Tivoli Storage Manager

Referências · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT04884 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95444 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4817 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21686874 · Aviso do Fabricante