CVEvulnerability

CVE-2013-6335

3.3 LOW Published 2014-08-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-08-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.3 LOW — AV:L/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-281

Description

The Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations.

Affected configurations

• ibm tivoli storage manager (>= 5.1 < 6.2.5.3) • ibm tivoli storage manager (>= 6.3.0 < 6.3.2) • ibm tivoli storage manager (>= 6.4.0 < 6.4.2) • ibm tivoli storage manager (>= 7.1.0.0 < 7.1.0.3) • ibm tivoli storage manager (>= 5.1 < 6.1.5.6)

Related

Weakness · CWE (1)

  • CWE-281 Improper Preservation of Permissions weakness

References