Security Bulletin: Tivoli Storage Manager UNIX and Linux client encryption key password vulnerability (CVE-2014-4818)

Summary A vulnerability in the IBM Tivoli Storage Manager TSM UNIX and Linux clients would allow a local user to obtain the encryption key password. Vulnerability Details CVEID: CVE-2014-4818 DESCRIPTION: IBM Tivoli Storage Manager Unix and Linux clients contain a vulnerability that would allow a...

CVE-2014-4818

IBM Tivoli Storage Manager UNIX/Linux clients contain a local information disclosure vulnerability (CVE-2014-4818) where the dsmtca component allows a local user to obtain the encryption key password used for backups/restores. Affected versions include TSM 5.4.x, 5.5.x, 6.x before 6.4.3, and 7.1....