CVE-2014-4817

The server in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename.

Score

CVSS 2.0 2.1 Low

Status

Modified - psirt@us.ibm.com

Published

2014-11-18

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Tivoli Storage Manager (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT04884
• http://www-01.ibm.com/support/docview.wss?uid=swg21686874
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95444