CVE-2013-6714
Summary
| CVE | CVE-2013-6714 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-05-26 19:55:00 UTC |
| Updated | 2017-08-29 01:33:00 UTC |
| Description | The FlashCopy Manager for VMware component in IBM Tivoli Storage FlashCopy Manager 3.1 through 4.1.0.1 does not properly check authorization for backup and restore operations, which allows local users to obtain sensitive VM data or cause a denial of service (data overwrite or disk consumption) via unspecified GUI actions. |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Tivoli Storage Flashcopy Manager | 3.1.0 | All | All | All |
| Application | Ibm | Tivoli Storage Flashcopy Manager | 3.1.1 | All | All | All |
| Application | Ibm | Tivoli Storage Flashcopy Manager | 3.2.0 | All | All | All |
| Application | Ibm | Tivoli Storage Flashcopy Manager | 3.2.1 | All | All | All |
| Application | Ibm | Tivoli Storage Flashcopy Manager | 4.1.0 | All | All | All |
| Application | Ibm | Tivoli Storage Flashcopy Manager | 4.1.0.1 | All | All | All |
| Application | Ibm | Tivoli Storage Flashcopy Manager | 3.1.0 | All | All | All |
| Application | Ibm | Tivoli Storage Flashcopy Manager | 3.1.1 | All | All | All |
| Application | Ibm | Tivoli Storage Flashcopy Manager | 3.2.0 | All | All | All |
| Application | Ibm | Tivoli Storage Flashcopy Manager | 3.2.1 | All | All | All |
| Application | Ibm | Tivoli Storage Flashcopy Manager | 4.1.0 | All | All | All |
| Application | Ibm | Tivoli Storage Flashcopy Manager | 4.1.0.1 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Security Bulletin: Privilege Escalation Vulnerability in the FlashCopy Manager for VMware GUI (CVE-2013-6714) | CONFIRM | www-01.ibm.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.