PT-2019-16894 · Microsoft+1 · Windows+3

Publicado 2019-04-02 · Atualizado 2020-08-24 · CVE-2019-4093

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Média

Vetor base

AV:L/PR:N/AC:L/S:U/C:L/UI:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager (IBM Spectrum Protect) version 8.1.7

Description The issue allows a user to restore files and directories using the IBM Spectrum Protect Client Web User Interface on Windows that they should not have access to due to incorrect file permissions.

Recommendations For version 8.1.7, consider restricting access to the IBM Spectrum Protect Client Web User Interface until a fix is available to prevent unauthorized file restoration.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2019-4093

Produtos afetados

Ibm Spectrum Protect

Ibm Spectrum Protect Client Web User Interface

Ibm Tivoli Storage Manager

Windows

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-4093 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-4093 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=ibm10875518 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/157981 · Aviso do Fabricante