CVE-2014-4817
Summary
| CVE | CVE-2014-4817 |
|---|---|
| State | PUBLISHED |
| Assigner | ibm |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-11-18 23:59:00 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | The server in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:L/AC:L/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Tivoli Storage Manager | 5.1.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.1.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.1.10 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.1.5 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.1.6 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.1.7 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.1.8 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.1.9 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.2 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.2.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.2.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.2.2 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.2.4 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.2.5.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.2.5.2 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.2.5.3 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.2.7 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.2.8 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.2.9 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.3 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.3.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.3.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.3.2 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.3.2.4 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.3.3 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.3.4 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.3.5.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.3.6.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.3.6.2 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.3.6.3 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.3.6.4 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.3.6.5 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.3.6.6 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.4 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.4.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.4.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.4.2 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.4.2.2 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.4.2.3 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.4.2.4 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.4.3.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.4.3.2 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.4.3.3 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.4.4.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.5.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.5.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.5.2 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.5.3 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.5.4 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 5.5.4.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.1.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.1.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.1.2 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.1.3 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.1.4 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.1.5 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.1.5.4 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.2.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.2.0.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.2.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.2.2 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.2.3 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.2.4 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.2.4.4 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.2.4.7 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.2.6 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.2.7 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.3.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.3.0.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.3.0.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.3.0.17 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.3.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.3.2 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.3.2.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.3.3 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.3.4 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.3.5 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.3.5.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.4.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.4.0.0 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.4.1 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 6.4.2 | All | All | All |
| Application | Ibm | Tivoli Storage Manager | 7.1.0 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| IT04884: TIVOLI STORAGE MANAGER PROBLEM WHEREIN UNIX AND LINUX CLIENTS CAN INCORRECTLY ROLL OFF AUTHORIZED BACKUP VERSIONS | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | Vendor Advisory |
| IBM notice: The page you requested cannot be displayed | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.