CVE-2013-3976

Published: Mar 26, 2014Modified: May 6, 2026

2.1

Vector

AV:N/AC:H/Au:S/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The (1) Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM Tivoli Storage Manager for Mail and the (2) FlashCopy Manager for Exchange component 2.2 and 3.1 before 3.1.1 in IBM Tivoli Storage FlashCopy Manager do not properly constrain mailbox contents during certain PST restore operations, which allows remote authenticated users to read the personal e-mail of other users in opportunistic circumstances by launching an e-mail client after an administrator performs a multiple-mailbox restore.

Affected (7)

Products: Ibm: Data Protection, Flashcopy Manager, Tivoli Storage Flashcopy Manager, Tivoli Storage Manager For Mail

Ibm

4 products

Data Protection

Flashcopy Manager

Tivoli Storage Flashcopy Manager

Tivoli Storage Manager For Mail

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Data Protection	Version 6.1
Ibm Data Protection	Version 6.3
Ibm Flashcopy Manager	Version 2.1
Ibm Flashcopy Manager	Version 2.2
Ibm Flashcopy Manager	Version 3.1
Ibm Tivoli Storage Flashcopy Manager	All versions
Ibm Tivoli Storage Manager For Mail	All versions