CVE-2013-6713 — IBM Tivoli Storage Manager FOR Virtual Environments vulnerability

CWE-2643 documents3 sources
Severity
4.1MEDIUMNVD
EPSS
0.1%
top 84.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Tivoli Storage Manager FOR Virtual Environments
Timeline
PublishedMay 26
Latest updateMay 17

Description

The Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments (TSMVE) 6.3 through 7.1.0.2 does not properly check authorization for backup and restore operations, which allows local users to obtain sensitive VM data or cause a denial of service (disk consumption) via unspecified GUI actions.

CVSS vector

AV:L/AC:M/C:P/I:P/A:PExploitability: 2.7 | Impact: 6.4

Affected Packages1 packages

▶NVDibm/tivoli_storage_manager10 versions+9

🔴Vulnerability Details

2
GHSA
GHSA-g5jm-897x-6qq2: The Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments (TSMVE) 6↗2022-05-17
▶
CVEList
CVE-2013-6713: The Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments (TSMVE) 6↗2014-05-26
▶
CVE-2013-6713 — IBM vulnerability | cvebase