IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging previous use of a symlink during archive and retrieve actions.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.0 | 2.5 | LOW | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N |
| Primary | 2.0 | 2.1 | LOW | AV:L/AC:L/Au:N/C:P/I:N/A:N |
| Hyperlink | Source | Resource |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg1IT13686 | psirt@us.ibm.com | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg21985579 | psirt@us.ibm.com | Vendor Advisory |
| http://www.securityfocus.com/bid/91534 | psirt@us.ibm.com | N/A |
| http://www.securitytracker.com/id/1036220 | psirt@us.ibm.com | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg1IT13686 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg21985579 | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| http://www.securityfocus.com/bid/91534 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.securitytracker.com/id/1036220 | af854a3a-2127-422b-91ae-364da2661108 | N/A |