CVE-2013-6713

IBM Tivoli Storage Manager for Virtual Environments 6.3-7.1.0.2 - Unauthorized Data Access and DoS via GUI

Title source: llm
STIX 2.1

Description

The Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments (TSMVE) 6.3 through 7.1.0.2 does not properly check authorization for backup and restore operations, which allows local users to obtain sensitive VM data or cause a denial of service (disk consumption) via unspecified GUI actions.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/89055
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21673051

Scores

EPSS 0.0026
EPSS Percentile 17.8%

Details

CWE
CWE-264
Status published
Products (10)
ibm/tivoli_storage_manager_for_virtual_environments 6.3.0.0
ibm/tivoli_storage_manager_for_virtual_environments 6.3.1.0
ibm/tivoli_storage_manager_for_virtual_environments 6.3.2.0
ibm/tivoli_storage_manager_for_virtual_environments 6.3.2.1
ibm/tivoli_storage_manager_for_virtual_environments 6.3.3.0
ibm/tivoli_storage_manager_for_virtual_environments 6.4.0.0
ibm/tivoli_storage_manager_for_virtual_environments 6.4.1.0
ibm/tivoli_storage_manager_for_virtual_environments 7.1.0.0
ibm/tivoli_storage_manager_for_virtual_environments 7.1.0.1
ibm/tivoli_storage_manager_for_virtual_environments 7.1.0.2
Published May 26, 2014
Tracked Since Feb 18, 2026