PT-2015-4481 · Ibm · Ibm Tivoli Storage Manager Fastback
Published
2015-04-06
·
Updated
2015-04-08
·
CVE-2015-0119
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
IBM Tivoli Storage Manager FastBack versions 6.1.x through 6.1.10
Description
The issue allows remote attackers to execute arbitrary code by connecting to the Mount port. This is related to the CMountDismount::GetVaultDump function.
Recommendations
For versions 6.1.x through 6.1.10, update to version 6.1.11.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Mount port to minimize the risk of exploitation.
Fix
Improper Access Control
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Tivoli Storage Manager Fastback