CVE-2017-1301

Published: Oct 5, 2017Modified: May 13, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the system, which could allow the attacker to overwrite arbitrary files on the system with elevated privileges. IBM X-Force ID: 125163.

Affected (62)

Products: Ibm: Tivoli Storage Manager

Ibm

1 product

Tivoli Storage Manager

Configuration A

62 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Storage Manager	Version 6.1.0
Ibm Tivoli Storage Manager	Version 6.1.1
Ibm Tivoli Storage Manager	Version 6.1.2
Ibm Tivoli Storage Manager	Version 6.1.3
Ibm Tivoli Storage Manager	Version 6.1.4
Ibm Tivoli Storage Manager	Version 6.1.5.4
Ibm Tivoli Storage Manager	Version 6.1.5.5
Ibm Tivoli Storage Manager	Version 6.1.5.6
Ibm Tivoli Storage Manager	Version 6.1.5
Ibm Tivoli Storage Manager	Version 6.1
Ibm Tivoli Storage Manager	Version 6.2.0
Ibm Tivoli Storage Manager	Version 6.2.1
Ibm Tivoli Storage Manager	Version 6.2.2
Ibm Tivoli Storage Manager	Version 6.2.3
Ibm Tivoli Storage Manager	Version 6.2.4
Ibm Tivoli Storage Manager	Version 6.3.0.15
Ibm Tivoli Storage Manager	Version 6.3.0.17
Ibm Tivoli Storage Manager	Version 6.3.0.5
Ibm Tivoli Storage Manager	Version 6.3.1.2
Ibm Tivoli Storage Manager	Version 6.3.1
Ibm Tivoli Storage Manager	Version 6.3.2.2
Ibm Tivoli Storage Manager	Version 6.3.3
Ibm Tivoli Storage Manager	Version 6.3.4
Ibm Tivoli Storage Manager	Version 6.3.5.1
Ibm Tivoli Storage Manager	Version 6.3.5
Ibm Tivoli Storage Manager	Version 6.3.6.100
Ibm Tivoli Storage Manager	Version 6.3.6
Ibm Tivoli Storage Manager	Version 6.3
Ibm Tivoli Storage Manager	Version 6.4.1.0
Ibm Tivoli Storage Manager	Version 6.4.1
Ibm Tivoli Storage Manager	Version 6.4.2.100
Ibm Tivoli Storage Manager	Version 6.4.2.200
Ibm Tivoli Storage Manager	Version 6.4.2.500
Ibm Tivoli Storage Manager	Version 6.4.2.600
Ibm Tivoli Storage Manager	Version 6.4.2
Ibm Tivoli Storage Manager	Version 6.4.3.1
Ibm Tivoli Storage Manager	Version 6.4.3
Ibm Tivoli Storage Manager	Version 7.1..5.100
Ibm Tivoli Storage Manager	Version 7.1.0.1
Ibm Tivoli Storage Manager	Version 7.1.0.2
Ibm Tivoli Storage Manager	Version 7.1.0.3
Ibm Tivoli Storage Manager	Version 7.1.1.100
Ibm Tivoli Storage Manager	Version 7.1.1.1
Ibm Tivoli Storage Manager	Version 7.1.1.200
Ibm Tivoli Storage Manager	Version 7.1.1.2
Ibm Tivoli Storage Manager	Version 7.1.1.300
Ibm Tivoli Storage Manager	Version 7.1.1
Ibm Tivoli Storage Manager	Version 7.1.3.000
Ibm Tivoli Storage Manager	Version 7.1.3.100
Ibm Tivoli Storage Manager	Version 7.1.3.1
Ibm Tivoli Storage Manager	Version 7.1.3.2
Ibm Tivoli Storage Manager	Version 7.1.3
Ibm Tivoli Storage Manager	Version 7.1.4.1
Ibm Tivoli Storage Manager	Version 7.1.4.2
Ibm Tivoli Storage Manager	Version 7.1.4
Ibm Tivoli Storage Manager	Version 7.1.5.200
Ibm Tivoli Storage Manager	Version 7.1.5
Ibm Tivoli Storage Manager	Version 7.1.6.6
Ibm Tivoli Storage Manager	Version 7.1.6
Ibm Tivoli Storage Manager	Version 7.1
Ibm Tivoli Storage Manager	Version 8.1.0.2
Ibm Tivoli Storage Manager	Version 8.1.0