Vulnerability in IBM Tivoli Storage Manager

CVE-2014-4817

The server in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename.

EPSS: 0.006 (45.6th percentile) — read the EPSS interpretation.

Affected products

Ibm Tivoli_storage_manager — versions 5.1.0, 5.1.1, 5.1.5
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)