CVE-2016-2894
03.07.2016, 21:59
IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging previous use of a symlink during archive and retrieve actions.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | tivoli_storage_manager | 5.5 |
| ibm | tivoli_storage_manager | 5.5.0 |
| ibm | tivoli_storage_manager | 5.5.2 |
| ibm | tivoli_storage_manager | 5.5.3 |
| ibm | tivoli_storage_manager | 5.5.4 |
| ibm | tivoli_storage_manager | 5.5.4.1 |
| ibm | tivoli_storage_manager | 5.5.4.2 |
| ibm | tivoli_storage_manager | 5.5.4.3 |
| ibm | tivoli_storage_manager | 6.1 |
| ibm | tivoli_storage_manager | 6.1.0 |
| ibm | tivoli_storage_manager | 6.1.1 |
| ibm | tivoli_storage_manager | 6.1.2 |
| ibm | tivoli_storage_manager | 6.1.3 |
| ibm | tivoli_storage_manager | 6.1.4 |
| ibm | tivoli_storage_manager | 6.1.5 |
| ibm | tivoli_storage_manager | 6.1.5.4 |
| ibm | tivoli_storage_manager | 6.1.5.5 |
| ibm | tivoli_storage_manager | 6.1.5.6 |
| ibm | tivoli_storage_manager | 6.2 |
| ibm | tivoli_storage_manager | 6.2.0 |
| ibm | tivoli_storage_manager | 6.2.1 |
| ibm | tivoli_storage_manager | 6.2.2 |
| ibm | tivoli_storage_manager | 6.2.3 |
| ibm | tivoli_storage_manager | 6.2.4 |
| ibm | tivoli_storage_manager | 6.2.4.7 |
| ibm | tivoli_storage_manager | 6.3 |
| ibm | tivoli_storage_manager | 6.3.0 |
| ibm | tivoli_storage_manager | 6.3.0.5 |
| ibm | tivoli_storage_manager | 6.3.0.15 |
| ibm | tivoli_storage_manager | 6.3.0.17 |
| ibm | tivoli_storage_manager | 6.3.1 |
| ibm | tivoli_storage_manager | 6.3.1.2 |
| ibm | tivoli_storage_manager | 6.3.2.2 |
| ibm | tivoli_storage_manager | 6.4 |
| ibm | tivoli_storage_manager | 6.4.0 |
| ibm | tivoli_storage_manager | 6.4.0.1 |
| ibm | tivoli_storage_manager | 6.4.0.4 |
| ibm | tivoli_storage_manager | 6.4.0.5 |
| ibm | tivoli_storage_manager | 6.4.0.7 |
| ibm | tivoli_storage_manager | 6.4.1.3 |
| ibm | tivoli_storage_manager | 6.4.1.7 |
| ibm | tivoli_storage_manager | 6.4.2.1 |
| ibm | tivoli_storage_manager | 6.4.2.100 |
| ibm | tivoli_storage_manager | 6.4.2.200 |
| ibm | tivoli_storage_manager | 6.4.3 |
| ibm | tivoli_storage_manager | 6.4.3.1 |
| ibm | tivoli_storage_manager | 7.1 |
| ibm | tivoli_storage_manager | 7.1..5.100 |
| ibm | tivoli_storage_manager | 7.1.0.1 |
| ibm | tivoli_storage_manager | 7.1.0.2 |
| ibm | tivoli_storage_manager | 7.1.0.3 |
| ibm | tivoli_storage_manager | 7.1.1 |
| ibm | tivoli_storage_manager | 7.1.1.1 |
| ibm | tivoli_storage_manager | 7.1.1.100 |
| ibm | tivoli_storage_manager | 7.1.1.200 |
| ibm | tivoli_storage_manager | 7.1.1.300 |
| ibm | tivoli_storage_manager | 7.1.2 |
| ibm | tivoli_storage_manager | 7.1.3 |
| ibm | tivoli_storage_manager | 7.1.3.000 |
| ibm | tivoli_storage_manager | 7.1.3.1 |
| ibm | tivoli_storage_manager | 7.1.3.2 |
| ibm | tivoli_storage_manager | 7.1.3.100 |
| ibm | tivoli_storage_manager | 7.1.4 |
| ibm | tivoli_storage_manager | 7.1.4.1 |
| ibm | tivoli_storage_manager | 7.1.5 |
| ibm | tivoli_storage_manager | 7.1.5.200 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References