Vulnerability in IBM Tivoli Storage Manager
CVE-2015-4927
The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 before 7.1.3 on Linux and AIX uses world-writable permissions for unspecified files, which allows local users to gain privileges by writing to a file.
EPSS: 0.004 (31.2th percentile) — read the EPSS interpretation.
Affected products
- Ibm Tivoli_storage_manager — versions 6.3.3, 6.3.4, 6.3.5
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_SECTRACK)