PT-2014-3171 · Ibm · Ibm Tivoli Storage Flashcopy Manager

Published 2014-05-26 · Updated 2017-08-29 · CVE-2013-6714

Positive Technologies (AI Summary)

CVSS v2.0

4.1

Medium

Base vector

AV:L/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage FlashCopy Manager versions 3.1 through 4.1.0.1

Description The issue concerns the FlashCopy Manager for VMware component, which fails to properly check authorization for certain operations. This allows local users to potentially obtain sensitive data or cause a denial of service, such as data overwrite or disk consumption, by performing unspecified actions through the GUI.

Recommendations For versions 3.1 through 4.1.0.1, consider restricting access to the FlashCopy Manager for VMware component to minimize the risk of unauthorized data access or denial of service until a proper fix is applied. As a temporary workaround, limit local user privileges to prevent potential exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-6714

Affected Products

Ibm Tivoli Storage Flashcopy Manager

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21673045 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-6714 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89057 · Note