PT-2019-16894 · Microsoft+1 · Windows+3

Published 2019-04-02 · Updated 2020-08-24 · CVE-2019-4093

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/PR:N/AC:L/S:U/C:L/UI:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager (IBM Spectrum Protect) version 8.1.7

Description The issue allows a user to restore files and directories using the IBM Spectrum Protect Client Web User Interface on Windows that they should not have access to due to incorrect file permissions.

Recommendations For version 8.1.7, consider restricting access to the IBM Spectrum Protect Client Web User Interface until a fix is available to prevent unauthorized file restoration.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2019-4093

Affected Products

Ibm Spectrum Protect

Ibm Spectrum Protect Client Web User Interface

Ibm Tivoli Storage Manager

Windows

References · 4

• https://osv.dev/vulnerability/CVE-2019-4093 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4093 · Security Note
• http://ibm.com/support/docview.wss?uid=ibm10875518 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/157981 · Vendor Advisory