CVE-2014-4818: Infoleak
Published Feb 24, 2015
·Updated
dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4.x, 5.5.x, 6.x before 6.4.3, and 7.1.x before 7.1.2 allows local users to discover the backup/restore encryption-key password via unspecified vectors.
Affected Software
13 affected components
IBM Tivoli Storage Manager=5.4.0
IBM Tivoli Storage Manager=5.5
IBM Tivoli Storage Manager=6.1
IBM Tivoli Storage Manager=6.2
IBM Tivoli Storage Manager=6.3
IBM Tivoli Storage Manager=6.3.3
IBM Tivoli Storage Manager=6.3.4
IBM Tivoli Storage Manager=6.3.5
IBM Tivoli Storage Manager=6.4
IBM Tivoli Storage Manager=6.4.1
IBM Tivoli Storage Manager=6.4.2
IBM Tivoli Storage Manager=7.1
IBM Tivoli Storage Manager=7.1.1
Event History
Feb 24, 2015
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4818?
CVE-2014-4818 has a medium severity rating due to its potential impact on data confidentiality.
2
How do I fix CVE-2014-4818?
To fix CVE-2014-4818, upgrade your IBM Tivoli Storage Manager to version 6.4.3 or later.
3
Which versions of IBM Tivoli Storage Manager are affected by CVE-2014-4818?
CVE-2014-4818 affects IBM Tivoli Storage Manager versions 5.4.x, 5.5.x, 6.x before 6.4.3, and 7.1.x before 7.1.2.
4
What is the principal issue caused by CVE-2014-4818?
The principal issue caused by CVE-2014-4818 is that local users can discover the backup/restore encryption-key password.
5
Are there any known workarounds for CVE-2014-4818?
There are no official workarounds documented for CVE-2014-4818, and upgrading is the recommended solution.