Tivoli Storage Manager Server CVE-2014-4817 Local Unauthorized Access Vulnerability

Bugtraq ID:	71109
Class:	Design Error
CVE:	CVE-2014-4817
Remote:	No
Local:	Yes
Published:	Oct 21 2014 12:00AM
Updated:	Oct 21 2014 12:00AM
Credit:	Bartlomiej Balcerek
Vulnerable:	IBM Tivoli Storage Manager Server 7.1.1 IBM Tivoli Storage Manager Server 7.1 IBM Tivoli Storage Manager Server 6.3.5.0 IBM Tivoli Storage Manager Server 6.3 IBM Tivoli Storage Manager Server 6.2.6.0 IBM Tivoli Storage Manager Server 6.2 IBM Tivoli Storage Manager Server 6.1.5 IBM Tivoli Storage Manager Server 6.1 IBM Tivoli Storage Manager Server 5.5.7 IBM Tivoli Storage Manager Server 5.5 IBM Tivoli Storage Manager Server 5.4.4 IBM Tivoli Storage Manager Server 5.4
Not Vulnerable:

Tivoli Storage Manager Server CVE-2014-4817 Local Unauthorized Access Vulnerability

Tivoli Storage Manager Server is prone to a local unauthorized-access vulnerability.

A local attacker can exploit this issue to gain unauthorized access to the affected application. This may aid in further attacks.

Tivoli Storage Manager Server CVE-2014-4817 Local Unauthorized Access Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Tivoli Storage Manager Server CVE-2014-4817 Local Unauthorized Access Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.