NetSight
IP …
low2.5

CVE-2016-2894

IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain se…

Impact

IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging previous use of a symlink during archive and retrieve actions.

Affected products

VendorProductAffected versions
IbmTivoli Storage Manager
Versions 5.5, 5.5.0, 5.5.2, 5.5.3, 5.5.4, 5.5.4.1

Weakness classification

CWE-200

References