CVE-2014-4817
First published: Tue Nov 18 2014(Updated: )
The server in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Tivoli Storage Manager | =5.1.0 | |
| IBM Tivoli Storage Manager | =5.1.1 | |
| IBM Tivoli Storage Manager | =5.1.5 | |
| IBM Tivoli Storage Manager | =5.1.6 | |
| IBM Tivoli Storage Manager | =5.1.7 | |
| IBM Tivoli Storage Manager | =5.1.8 | |
| IBM Tivoli Storage Manager | =5.1.9 | |
| IBM Tivoli Storage Manager | =5.1.10 | |
| IBM Tivoli Storage Manager | =5.2 | |
| IBM Tivoli Storage Manager | =5.2.0 | |
| IBM Tivoli Storage Manager | =5.2.1 | |
| IBM Tivoli Storage Manager | =5.2.2 | |
| IBM Tivoli Storage Manager | =5.2.4 | |
| IBM Tivoli Storage Manager | =5.2.5.1 | |
| IBM Tivoli Storage Manager | =5.2.5.2 | |
| IBM Tivoli Storage Manager | =5.2.5.3 | |
| IBM Tivoli Storage Manager | =5.2.7 | |
| IBM Tivoli Storage Manager | =5.2.8 | |
| IBM Tivoli Storage Manager | =5.2.9 | |
| IBM Tivoli Storage Manager | =5.3 | |
| IBM Tivoli Storage Manager | =5.3.0 | |
| IBM Tivoli Storage Manager | =5.3.1 | |
| IBM Tivoli Storage Manager | =5.3.2 | |
| IBM Tivoli Storage Manager | =5.3.2.4 | |
| IBM Tivoli Storage Manager | =5.3.3 | |
| IBM Tivoli Storage Manager | =5.3.4 | |
| IBM Tivoli Storage Manager | =5.3.5.1 | |
| IBM Tivoli Storage Manager | =5.3.6.1 | |
| IBM Tivoli Storage Manager | =5.3.6.2 | |
| IBM Tivoli Storage Manager | =5.3.6.3 | |
| IBM Tivoli Storage Manager | =5.3.6.4 | |
| IBM Tivoli Storage Manager | =5.3.6.5 | |
| IBM Tivoli Storage Manager | =5.3.6.6 | |
| IBM Tivoli Storage Manager | =5.4 | |
| IBM Tivoli Storage Manager | =5.4.0 | |
| IBM Tivoli Storage Manager | =5.4.1 | |
| IBM Tivoli Storage Manager | =5.4.2 | |
| IBM Tivoli Storage Manager | =5.4.2.2 | |
| IBM Tivoli Storage Manager | =5.4.2.3 | |
| IBM Tivoli Storage Manager | =5.4.2.4 | |
| IBM Tivoli Storage Manager | =5.4.3.0 | |
| IBM Tivoli Storage Manager | =5.4.3.2 | |
| IBM Tivoli Storage Manager | =5.4.3.3 | |
| IBM Tivoli Storage Manager | =5.4.4.0 | |
| IBM Tivoli Storage Manager | =5.5.0 | |
| IBM Tivoli Storage Manager | =5.5.1 | |
| IBM Tivoli Storage Manager | =5.5.2 | |
| IBM Tivoli Storage Manager | =5.5.3 | |
| IBM Tivoli Storage Manager | =5.5.4 | |
| IBM Tivoli Storage Manager | =5.5.4.1 | |
| IBM Tivoli Storage Manager | =6.0 | |
| IBM Tivoli Storage Manager | =6.1.0 | |
| IBM Tivoli Storage Manager | =6.1.1 | |
| IBM Tivoli Storage Manager | =6.1.2 | |
| IBM Tivoli Storage Manager | =6.1.3 | |
| IBM Tivoli Storage Manager | =6.1.4 | |
| IBM Tivoli Storage Manager | =6.1.5 | |
| IBM Tivoli Storage Manager | =6.1.5.4 | |
| IBM Tivoli Storage Manager | =6.2.0 | |
| IBM Tivoli Storage Manager | =6.2.0.0 | |
| IBM Tivoli Storage Manager | =6.2.1 | |
| IBM Tivoli Storage Manager | =6.2.2 | |
| IBM Tivoli Storage Manager | =6.2.3 | |
| IBM Tivoli Storage Manager | =6.2.4 | |
| IBM Tivoli Storage Manager | =6.2.4.4 | |
| IBM Tivoli Storage Manager | =6.2.4.7 | |
| IBM Tivoli Storage Manager | =6.2.6 | |
| IBM Tivoli Storage Manager | =6.2.7 | |
| IBM Tivoli Storage Manager | =6.3.0 | |
| IBM Tivoli Storage Manager | =6.3.0.0 | |
| IBM Tivoli Storage Manager | =6.3.0.1 | |
| IBM Tivoli Storage Manager | =6.3.0.17 | |
| IBM Tivoli Storage Manager | =6.3.1 | |
| IBM Tivoli Storage Manager | =6.3.2 | |
| IBM Tivoli Storage Manager | =6.3.2.1 | |
| IBM Tivoli Storage Manager | =6.3.3 | |
| IBM Tivoli Storage Manager | =6.3.4 | |
| IBM Tivoli Storage Manager | =6.3.5 | |
| IBM Tivoli Storage Manager | =6.3.5.1 | |
| IBM Tivoli Storage Manager | =6.4.0 | |
| IBM Tivoli Storage Manager | =6.4.0.0 | |
| IBM Tivoli Storage Manager | =6.4.1 | |
| IBM Tivoli Storage Manager | =6.4.2 | |
| IBM Tivoli Storage Manager | =7.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-4817?
CVE-2014-4817 is classified as a medium severity vulnerability due to its potential to allow unauthorized file replacement.
How do I fix CVE-2014-4817?
To fix CVE-2014-4817, upgrade IBM Tivoli Storage Manager to version 6.3.5.10 or later, or 7.1.1.100 or later.
What kind of impact can CVE-2014-4817 have on my system?
CVE-2014-4817 can allow remote attackers to bypass access restrictions and overwrite existing file backups.
Which versions of IBM Tivoli Storage Manager are affected by CVE-2014-4817?
CVE-2014-4817 affects IBM Tivoli Storage Manager versions 5.x, 6.x prior to 6.3.5.10, and 7.x prior to 7.1.1.100.
Is there a workaround available for CVE-2014-4817?
There is no specific workaround for CVE-2014-4817 other than applying the recommended updates to fix the vulnerability.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm tivoli storage manager
- version/ibm tivoli storage manager/5.1.0
- version/ibm tivoli storage manager/5.1.1
- version/ibm tivoli storage manager/5.1.5
- version/ibm tivoli storage manager/5.1.6
- version/ibm tivoli storage manager/5.1.7
- version/ibm tivoli storage manager/5.1.8
- version/ibm tivoli storage manager/5.1.9
- version/ibm tivoli storage manager/5.1.10
- version/ibm tivoli storage manager/5.2
- version/ibm tivoli storage manager/5.2.0
- version/ibm tivoli storage manager/5.2.1
- version/ibm tivoli storage manager/5.2.2
- version/ibm tivoli storage manager/5.2.4
- version/ibm tivoli storage manager/5.2.5.1
- version/ibm tivoli storage manager/5.2.5.2
- version/ibm tivoli storage manager/5.2.5.3
- version/ibm tivoli storage manager/5.2.7
- version/ibm tivoli storage manager/5.2.8
- version/ibm tivoli storage manager/5.2.9
- version/ibm tivoli storage manager/5.3
- version/ibm tivoli storage manager/5.3.0
- version/ibm tivoli storage manager/5.3.1
- version/ibm tivoli storage manager/5.3.2
- version/ibm tivoli storage manager/5.3.2.4
- version/ibm tivoli storage manager/5.3.3
- version/ibm tivoli storage manager/5.3.4
- version/ibm tivoli storage manager/5.3.5.1
- version/ibm tivoli storage manager/5.3.6.1
- version/ibm tivoli storage manager/5.3.6.2
- version/ibm tivoli storage manager/5.3.6.3
- version/ibm tivoli storage manager/5.3.6.4
- version/ibm tivoli storage manager/5.3.6.5
- version/ibm tivoli storage manager/5.3.6.6
- version/ibm tivoli storage manager/5.4
- version/ibm tivoli storage manager/5.4.0
- version/ibm tivoli storage manager/5.4.1
- version/ibm tivoli storage manager/5.4.2
- version/ibm tivoli storage manager/5.4.2.2
- version/ibm tivoli storage manager/5.4.2.3
- version/ibm tivoli storage manager/5.4.2.4
- version/ibm tivoli storage manager/5.4.3.0
- version/ibm tivoli storage manager/5.4.3.2
- version/ibm tivoli storage manager/5.4.3.3
- version/ibm tivoli storage manager/5.4.4.0
- version/ibm tivoli storage manager/5.5.0
- version/ibm tivoli storage manager/5.5.1
- version/ibm tivoli storage manager/5.5.2
- version/ibm tivoli storage manager/5.5.3
- version/ibm tivoli storage manager/5.5.4
- version/ibm tivoli storage manager/5.5.4.1
- version/ibm tivoli storage manager/6.0
- version/ibm tivoli storage manager/6.1.0
- version/ibm tivoli storage manager/6.1.1
- version/ibm tivoli storage manager/6.1.2
- version/ibm tivoli storage manager/6.1.3
- version/ibm tivoli storage manager/6.1.4
- version/ibm tivoli storage manager/6.1.5
- version/ibm tivoli storage manager/6.1.5.4
- version/ibm tivoli storage manager/6.2.0
- version/ibm tivoli storage manager/6.2.0.0
- version/ibm tivoli storage manager/6.2.1
- version/ibm tivoli storage manager/6.2.2
- version/ibm tivoli storage manager/6.2.3
- version/ibm tivoli storage manager/6.2.4
- version/ibm tivoli storage manager/6.2.4.4
- version/ibm tivoli storage manager/6.2.4.7
- version/ibm tivoli storage manager/6.2.6
- version/ibm tivoli storage manager/6.2.7
- version/ibm tivoli storage manager/6.3.0
- version/ibm tivoli storage manager/6.3.0.0
- version/ibm tivoli storage manager/6.3.0.1
- version/ibm tivoli storage manager/6.3.0.17
- version/ibm tivoli storage manager/6.3.1
- version/ibm tivoli storage manager/6.3.2
- version/ibm tivoli storage manager/6.3.2.1
- version/ibm tivoli storage manager/6.3.3
- version/ibm tivoli storage manager/6.3.4
- version/ibm tivoli storage manager/6.3.5
- version/ibm tivoli storage manager/6.3.5.1
- version/ibm tivoli storage manager/6.4.0
- version/ibm tivoli storage manager/6.4.0.0
- version/ibm tivoli storage manager/6.4.1
- version/ibm tivoli storage manager/6.4.2
- version/ibm tivoli storage manager/7.1.0