PT-2014-3170 · Ibm · Data Protection For Vmware+1

Published 2014-05-26 · Updated 2017-08-29 · CVE-2013-6713

Positive Technologies (AI Summary)

CVSS v2.0

4.1

Medium

Base vector

AV:L/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Virtual Environments (TSMVE) versions 6.3 through 7.1.0.2

Description The issue concerns the Data Protection for VMware component, which fails to properly check authorization for certain operations. This allows local users to potentially obtain sensitive data or cause a denial of service by consuming disk space through unspecified actions in the graphical user interface.

Recommendations For versions 6.3 through 7.1.0.2, consider restricting access to the Data Protection for VMware component to minimize the risk of unauthorized data access or denial of service until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-6713

Affected Products

Data Protection For Vmware

Ibm Tivoli Storage Manager For Virtual Environments

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-6713 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21673051 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89055 · Note