IBM Tivoli Storage Manager Client CVE-2014-4813 Local Privilege Escalation Vulnerability
BID:74323
Info
IBM Tivoli Storage Manager Client CVE-2014-4813 Local Privilege Escalation Vulnerability
| Bugtraq ID: | 74323 |
| Class: | Design Error |
| CVE: |
CVE-2014-4813 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 03 2015 12:00AM |
| Updated: | Mar 03 2015 12:00AM |
| Credit: | Bartlomiej Balcerek from WCSS CSIRT |
| Vulnerable: |
IBM IBM Tivoli Storage Manager Client 6.4 IBM IBM Tivoli Storage Manager Client 6.2.2 IBM IBM Tivoli Storage Manager Client 6.1.4 IBM IBM Tivoli Storage Manager Client 5.5.3 IBM IBM Tivoli Storage Manager Client 7.1.0.0 IBM IBM Tivoli Storage Manager Client 6.4.2.0 IBM IBM Tivoli Storage Manager Client 6.4.0.1 IBM IBM Tivoli Storage Manager Client 6.3.2.2 IBM IBM Tivoli Storage Manager Client 6.3.1.0 IBM IBM Tivoli Storage Manager Client 6.3.0.0 IBM IBM Tivoli Storage Manager Client 6.2.5.3 IBM IBM Tivoli Storage Manager Client 6.2.5.0 IBM IBM Tivoli Storage Manager Client 6.2.4.0 IBM IBM Tivoli Storage Manager Client 6.2.1.1 IBM IBM Tivoli Storage Manager Client 6.2.1.0 IBM IBM Tivoli Storage Manager Client 6.2.0.0 IBM IBM Tivoli Storage Manager Client 6.1.5.6 IBM IBM Tivoli Storage Manager Client 6.1.5.0 IBM IBM Tivoli Storage Manager Client 6.1.3.4 IBM IBM Tivoli Storage Manager Client 6.1.3.0 IBM IBM Tivoli Storage Manager Client 6.1.0.0 IBM IBM Tivoli Storage Manager Client 5.5.4.3 IBM IBM Tivoli Storage Manager Client 5.5.4.0 IBM IBM Tivoli Storage Manager Client 5.5.2.7 IBM IBM Tivoli Storage Manager Client 5.5.2.12 IBM IBM Tivoli Storage Manager Client 5.5.0.0 IBM IBM Tivoli Storage Manager Client 5.4.3.6 IBM IBM Tivoli Storage Manager Client 5.4.3.4 IBM IBM Tivoli Storage Manager Client 5.4.3.3 IBM IBM Tivoli Storage Manager Client 5.4.0.0 |
| Not Vulnerable: | |
Discussion
IBM Tivoli Storage Manager Client CVE-2014-4813 Local Privilege Escalation Vulnerability
IBM Tivoli Storage Manager Client is prone to a local privilege-escalation vulnerability.
Exploiting this issue allows local attackers to gain elevated privileges.
IBM Tivoli Storage Manager Client is prone to a local privilege-escalation vulnerability.
Exploiting this issue allows local attackers to gain elevated privileges.
Exploit / POC
IBM Tivoli Storage Manager Client CVE-2014-4813 Local Privilege Escalation Vulnerability
An attacker requires local access to exploit this issue.
An attacker requires local access to exploit this issue.
Solution / Fix
IBM Tivoli Storage Manager Client CVE-2014-4813 Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM Tivoli Storage Manager Client CVE-2014-4813 Local Privilege Escalation Vulnerability
References:
References: