CVE-2013-6714

IBM Tivoli Storage FlashCopy Manager 3.1-4.1.0.1 - Sensitive Data Exposure and DoS via GUI

Title source: llm
STIX 2.1

Description

The FlashCopy Manager for VMware component in IBM Tivoli Storage FlashCopy Manager 3.1 through 4.1.0.1 does not properly check authorization for backup and restore operations, which allows local users to obtain sensitive VM data or cause a denial of service (data overwrite or disk consumption) via unspecified GUI actions.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/89057
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21673045

Scores

EPSS 0.0026
EPSS Percentile 17.8%

Details

CWE
CWE-264
Status published
Products (6)
ibm/tivoli_storage_flashcopy_manager 3.1.0
ibm/tivoli_storage_flashcopy_manager 3.1.1
ibm/tivoli_storage_flashcopy_manager 3.2.0
ibm/tivoli_storage_flashcopy_manager 3.2.1
ibm/tivoli_storage_flashcopy_manager 4.1.0
ibm/tivoli_storage_flashcopy_manager 4.1.0.1
Published May 26, 2014
Tracked Since Feb 18, 2026