CVE-2013-5371

Published: Jan 23, 2014Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The client in IBM Tivoli Storage Manager (TSM) 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System (ReFS) files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations.

Affected (2)

Products: Ibm: Tivoli Storage Manager

1 product

Tivoli Storage Manager

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Storage Manager	Version 6.3.1
Ibm Tivoli Storage Manager	Version 6.4.0

Related CWEs

References (6)

http://www-01.ibm.com/support/docview.wss?uid=swg1IC92933

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg21662608

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/86661

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1IC92933

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg21662608

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/86661

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.