Lucene search

[email protected]CVE-2014-4817

HistoryNov 18, 2014 - 11:59 p.m.

CVE-2014-4817

2014-11-1823:59:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2014-4817

ibm

tivoli

storage manager

tsm

remote access

bypass

vulnerability

nvd

6.7 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

52.6%

JSON

The server in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename.

CPENameOperatorVersion
ibm:tivoli_storage_manageribm tivoli storage managereq5.1.6
ibm:tivoli_storage_manageribm tivoli storage managereq6.2.4.4
ibm:tivoli_storage_manageribm tivoli storage managereq6.2.0.0
ibm:tivoli_storage_manageribm tivoli storage managereq5.3.6.3
ibm:tivoli_storage_manageribm tivoli storage managereq6.3.2.1
ibm:tivoli_storage_manageribm tivoli storage managereq6.4.2
ibm:tivoli_storage_manageribm tivoli storage managereq5.4.3.3
ibm:tivoli_storage_manageribm tivoli storage managereq5.2.8
ibm:tivoli_storage_manageribm tivoli storage managereq6.3.0.0
ibm:tivoli_storage_manageribm tivoli storage managereq5.4

CPE	Name	Operator	Version
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	5.1.6
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	6.2.4.4
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	6.2.0.0
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	5.3.6.3
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	6.3.2.1
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	6.4.2
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	5.4.3.3
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	5.2.8
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	6.3.0.0
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	5.4

Rows per page:

1-10 of 841

References

www-01.ibm.com/support/docview.wss?uid=swg1IT04884

www-01.ibm.com/support/docview.wss?uid=swg21686874

exchange.xforce.ibmcloud.com/vulnerabilities/95444

6.7 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

52.6%

JSON

Related for CVE-2014-4817

prion1 nessus1 cvelist1