CVE-2016-2894
2.5
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.0 / Impact: 1.4
Source: NVD
Description
IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging previous use of a symlink during archive and retrieve actions.
Affected (66)
Products: Ibm: Tivoli Storage Manager
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 5.5.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 6.4.0.1 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 7.1..5.100 |
References (8)
Source: psirt@us.ibm.com
Source: psirt@us.ibm.com
Source: psirt@us.ibm.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.