Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-4817
HistoryNov 18, 2014 - 11:59 p.m.

CVE-2014-4817

2014-11-1823:59:00
CWE-264
[email protected]
web.nvd.nist.gov
4

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.002

Percentile

53.0%

JSON

The server in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename.

Affected configurations

Nvd
Node
ibmtivoli_storage_managerMatch5.1.0
OR
ibmtivoli_storage_managerMatch5.1.1
OR
ibmtivoli_storage_managerMatch5.1.5
OR
ibmtivoli_storage_managerMatch5.1.6
OR
ibmtivoli_storage_managerMatch5.1.7
OR
ibmtivoli_storage_managerMatch5.1.8
OR
ibmtivoli_storage_managerMatch5.1.9
OR
ibmtivoli_storage_managerMatch5.1.10
OR
ibmtivoli_storage_managerMatch5.2
OR
ibmtivoli_storage_managerMatch5.2.0
OR
ibmtivoli_storage_managerMatch5.2.1
OR
ibmtivoli_storage_managerMatch5.2.2
OR
ibmtivoli_storage_managerMatch5.2.4
OR
ibmtivoli_storage_managerMatch5.2.5.1
OR
ibmtivoli_storage_managerMatch5.2.5.2
OR
ibmtivoli_storage_managerMatch5.2.5.3
OR
ibmtivoli_storage_managerMatch5.2.7
OR
ibmtivoli_storage_managerMatch5.2.8
OR
ibmtivoli_storage_managerMatch5.2.9
OR
ibmtivoli_storage_managerMatch5.3
OR
ibmtivoli_storage_managerMatch5.3.0
OR
ibmtivoli_storage_managerMatch5.3.1
OR
ibmtivoli_storage_managerMatch5.3.2
OR
ibmtivoli_storage_managerMatch5.3.2.4
OR
ibmtivoli_storage_managerMatch5.3.3
OR
ibmtivoli_storage_managerMatch5.3.4
OR
ibmtivoli_storage_managerMatch5.3.5.1
OR
ibmtivoli_storage_managerMatch5.3.6.1
OR
ibmtivoli_storage_managerMatch5.3.6.2
OR
ibmtivoli_storage_managerMatch5.3.6.3
OR
ibmtivoli_storage_managerMatch5.3.6.4
OR
ibmtivoli_storage_managerMatch5.3.6.5
OR
ibmtivoli_storage_managerMatch5.3.6.6
OR
ibmtivoli_storage_managerMatch5.4
OR
ibmtivoli_storage_managerMatch5.4.0
OR
ibmtivoli_storage_managerMatch5.4.1
OR
ibmtivoli_storage_managerMatch5.4.2
OR
ibmtivoli_storage_managerMatch5.4.2.2
OR
ibmtivoli_storage_managerMatch5.4.2.3
OR
ibmtivoli_storage_managerMatch5.4.2.4
OR
ibmtivoli_storage_managerMatch5.4.3.0
OR
ibmtivoli_storage_managerMatch5.4.3.2
OR
ibmtivoli_storage_managerMatch5.4.3.3
OR
ibmtivoli_storage_managerMatch5.4.4.0
OR
ibmtivoli_storage_managerMatch5.5.0
OR
ibmtivoli_storage_managerMatch5.5.1
OR
ibmtivoli_storage_managerMatch5.5.2
OR
ibmtivoli_storage_managerMatch5.5.3
OR
ibmtivoli_storage_managerMatch5.5.4
OR
ibmtivoli_storage_managerMatch5.5.4.1
OR
ibmtivoli_storage_managerMatch6.0
OR
ibmtivoli_storage_managerMatch6.1.0
OR
ibmtivoli_storage_managerMatch6.1.1
OR
ibmtivoli_storage_managerMatch6.1.2
OR
ibmtivoli_storage_managerMatch6.1.3
OR
ibmtivoli_storage_managerMatch6.1.4
OR
ibmtivoli_storage_managerMatch6.1.5
OR
ibmtivoli_storage_managerMatch6.1.5.4
OR
ibmtivoli_storage_managerMatch6.2.0
OR
ibmtivoli_storage_managerMatch6.2.0.0
OR
ibmtivoli_storage_managerMatch6.2.1
OR
ibmtivoli_storage_managerMatch6.2.2
OR
ibmtivoli_storage_managerMatch6.2.3
OR
ibmtivoli_storage_managerMatch6.2.4
OR
ibmtivoli_storage_managerMatch6.2.4.4
OR
ibmtivoli_storage_managerMatch6.2.4.7
OR
ibmtivoli_storage_managerMatch6.2.6
OR
ibmtivoli_storage_managerMatch6.2.7
OR
ibmtivoli_storage_managerMatch6.3.0
OR
ibmtivoli_storage_managerMatch6.3.0.0
OR
ibmtivoli_storage_managerMatch6.3.0.1
OR
ibmtivoli_storage_managerMatch6.3.0.17
OR
ibmtivoli_storage_managerMatch6.3.1
OR
ibmtivoli_storage_managerMatch6.3.2
OR
ibmtivoli_storage_managerMatch6.3.2.1
OR
ibmtivoli_storage_managerMatch6.3.3
OR
ibmtivoli_storage_managerMatch6.3.4
OR
ibmtivoli_storage_managerMatch6.3.5
OR
ibmtivoli_storage_managerMatch6.3.5.1
OR
ibmtivoli_storage_managerMatch6.4.0
OR
ibmtivoli_storage_managerMatch6.4.0.0
OR
ibmtivoli_storage_managerMatch6.4.1
OR
ibmtivoli_storage_managerMatch6.4.2
OR
ibmtivoli_storage_managerMatch7.1.0
VendorProductVersionCPE
ibmtivoli_storage_manager5.1.0cpe:2.3:a:ibm:tivoli_storage_manager:5.1.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.1.1cpe:2.3:a:ibm:tivoli_storage_manager:5.1.1:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.1.5cpe:2.3:a:ibm:tivoli_storage_manager:5.1.5:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.1.6cpe:2.3:a:ibm:tivoli_storage_manager:5.1.6:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.1.7cpe:2.3:a:ibm:tivoli_storage_manager:5.1.7:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.1.8cpe:2.3:a:ibm:tivoli_storage_manager:5.1.8:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.1.9cpe:2.3:a:ibm:tivoli_storage_manager:5.1.9:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.1.10cpe:2.3:a:ibm:tivoli_storage_manager:5.1.10:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.2cpe:2.3:a:ibm:tivoli_storage_manager:5.2:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.2.0cpe:2.3:a:ibm:tivoli_storage_manager:5.2.0:*:*:*:*:*:*:*
Rows per page:
1-10 of 841

Related

cve 1
prion 1
nessus 1
cvelist 1
cve
cve
CVE-2014-4817
2014-11-18 23:59:00
prion
prion
Design/Logic Flaw
2014-11-18 23:59:00
nessus
nessus
Tivoli Storage Manager Server Unauthorized Backup File Displacement
2015-02-24 00:00:00
cvelist
cvelist
CVE-2014-4817
2014-11-18 23:00:00

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.002

Percentile

53.0%

JSON
Related for NVD:CVE-2014-4817
cve1prion1nessus1cvelist1