CVE-2016-2894
EUVD-2016-396703.07.2016, 21:59
IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging previous use of a symlink during archive and retrieve actions.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | tivoli_storage_manager | 5.5 |
| ibm | tivoli_storage_manager | 5.5.0 |
| ibm | tivoli_storage_manager | 5.5.2 |
| ibm | tivoli_storage_manager | 5.5.3 |
| ibm | tivoli_storage_manager | 5.5.4 |
| ibm | tivoli_storage_manager | 5.5.4.1 |
| ibm | tivoli_storage_manager | 5.5.4.2 |
| ibm | tivoli_storage_manager | 5.5.4.3 |
| ibm | tivoli_storage_manager | 6.1 |
| ibm | tivoli_storage_manager | 6.1.0 |
| ibm | tivoli_storage_manager | 6.1.1 |
| ibm | tivoli_storage_manager | 6.1.2 |
| ibm | tivoli_storage_manager | 6.1.3 |
| ibm | tivoli_storage_manager | 6.1.4 |
| ibm | tivoli_storage_manager | 6.1.5 |
| ibm | tivoli_storage_manager | 6.1.5.4 |
| ibm | tivoli_storage_manager | 6.1.5.5 |
| ibm | tivoli_storage_manager | 6.1.5.6 |
| ibm | tivoli_storage_manager | 6.2 |
| ibm | tivoli_storage_manager | 6.2.0 |
| ibm | tivoli_storage_manager | 6.2.1 |
| ibm | tivoli_storage_manager | 6.2.2 |
| ibm | tivoli_storage_manager | 6.2.3 |
| ibm | tivoli_storage_manager | 6.2.4 |
| ibm | tivoli_storage_manager | 6.2.4.7 |
| ibm | tivoli_storage_manager | 6.3 |
| ibm | tivoli_storage_manager | 6.3.0 |
| ibm | tivoli_storage_manager | 6.3.0.5 |
| ibm | tivoli_storage_manager | 6.3.0.15 |
| ibm | tivoli_storage_manager | 6.3.0.17 |
| ibm | tivoli_storage_manager | 6.3.1 |
| ibm | tivoli_storage_manager | 6.3.1.2 |
| ibm | tivoli_storage_manager | 6.3.2.2 |
| ibm | tivoli_storage_manager | 6.4 |
| ibm | tivoli_storage_manager | 6.4.0 |
| ibm | tivoli_storage_manager | 6.4.0.1 |
| ibm | tivoli_storage_manager | 6.4.0.4 |
| ibm | tivoli_storage_manager | 6.4.0.5 |
| ibm | tivoli_storage_manager | 6.4.0.7 |
| ibm | tivoli_storage_manager | 6.4.1.3 |
| ibm | tivoli_storage_manager | 6.4.1.7 |
| ibm | tivoli_storage_manager | 6.4.2.1 |
| ibm | tivoli_storage_manager | 6.4.2.100 |
| ibm | tivoli_storage_manager | 6.4.2.200 |
| ibm | tivoli_storage_manager | 6.4.3 |
| ibm | tivoli_storage_manager | 6.4.3.1 |
| ibm | tivoli_storage_manager | 7.1 |
| ibm | tivoli_storage_manager | 7.1..5.100 |
| ibm | tivoli_storage_manager | 7.1.0.1 |
| ibm | tivoli_storage_manager | 7.1.0.2 |
| ibm | tivoli_storage_manager | 7.1.0.3 |
| ibm | tivoli_storage_manager | 7.1.1 |
| ibm | tivoli_storage_manager | 7.1.1.1 |
| ibm | tivoli_storage_manager | 7.1.1.100 |
| ibm | tivoli_storage_manager | 7.1.1.200 |
| ibm | tivoli_storage_manager | 7.1.1.300 |
| ibm | tivoli_storage_manager | 7.1.2 |
| ibm | tivoli_storage_manager | 7.1.3 |
| ibm | tivoli_storage_manager | 7.1.3.000 |
| ibm | tivoli_storage_manager | 7.1.3.1 |
| ibm | tivoli_storage_manager | 7.1.3.2 |
| ibm | tivoli_storage_manager | 7.1.3.100 |
| ibm | tivoli_storage_manager | 7.1.4 |
| ibm | tivoli_storage_manager | 7.1.4.1 |
| ibm | tivoli_storage_manager | 7.1.5 |
| ibm | tivoli_storage_manager | 7.1.5.200 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References