CVEvulnerability
CVE-2013-5371
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-01-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The client in IBM Tivoli Storage Manager (TSM) 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System (ReFS) files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations.
Affected configurations
• ibm tivoli storage manager 6.3.1
• ibm tivoli storage manager 6.4.0
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC92933 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21662608 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86661 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC92933 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21662608 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86661 exchange.xforce.ibmcloud.com