CVE-2019-4093

MEDIUM

IBM Spectrum Protect - Incorrect Permission Assignment

Title source: rule

Description

IBM Tivoli Storage Manager (IBM Spectrum Protect 8.1.7) could allow a user to restore files and directories using IBM Spectrum Prootect Client Web User Interface on Windows that they should not have access to due to incorrect file permissions. IBM X-Force ID: 157981.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=ibm10875518

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/157981

Scores

CVSS v3 4.4

EPSS 0.0003

EPSS Percentile 7.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Details

CWE

CWE-732

Status published

Products (1)

ibm/spectrum_protect 8.1.7

Published Apr 02, 2019

Tracked Since Feb 18, 2026