CVE-2013-6713

2014-05-2619:55:04

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

4.1

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:S/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

Percentile

5.1%

JSON

The Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments (TSMVE) 6.3 through 7.1.0.2 does not properly check authorization for backup and restore operations, which allows local users to obtain sensitive VM data or cause a denial of service (disk consumption) via unspecified GUI actions.

Affected configurations

Nvd

Node

ibmtivoli_storage_manager_for_virtual_environmentsMatch6.3.0.0

ibmtivoli_storage_manager_for_virtual_environmentsMatch6.3.1.0

ibmtivoli_storage_manager_for_virtual_environmentsMatch6.3.2.0

ibmtivoli_storage_manager_for_virtual_environmentsMatch6.3.2.1

ibmtivoli_storage_manager_for_virtual_environmentsMatch6.3.3.0

ibmtivoli_storage_manager_for_virtual_environmentsMatch6.4.0.0

ibmtivoli_storage_manager_for_virtual_environmentsMatch6.4.1.0

ibmtivoli_storage_manager_for_virtual_environmentsMatch7.1.0.0

ibmtivoli_storage_manager_for_virtual_environmentsMatch7.1.0.1

ibmtivoli_storage_manager_for_virtual_environmentsMatch7.1.0.2

VendorProductVersionCPE
ibmtivoli_storage_manager_for_virtual_environments6.3.0.0cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.0.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_for_virtual_environments6.3.1.0cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.1.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_for_virtual_environments6.3.2.0cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.2.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_for_virtual_environments6.3.2.1cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.2.1:*:*:*:*:*:*:*
ibmtivoli_storage_manager_for_virtual_environments6.3.3.0cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.3.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_for_virtual_environments6.4.0.0cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.4.0.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_for_virtual_environments6.4.1.0cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.4.1.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_for_virtual_environments7.1.0.0cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:7.1.0.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_for_virtual_environments7.1.0.1cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:7.1.0.1:*:*:*:*:*:*:*
ibmtivoli_storage_manager_for_virtual_environments7.1.0.2cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:7.1.0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	tivoli_storage_manager_for_virtual_environments	6.3.0.0	cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.0.0:::::::*
ibm	tivoli_storage_manager_for_virtual_environments	6.3.1.0	cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.1.0:::::::*
ibm	tivoli_storage_manager_for_virtual_environments	6.3.2.0	cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.2.0:::::::*
ibm	tivoli_storage_manager_for_virtual_environments	6.3.2.1	cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.2.1:::::::*
ibm	tivoli_storage_manager_for_virtual_environments	6.3.3.0	cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.3.0:::::::*
ibm	tivoli_storage_manager_for_virtual_environments	6.4.0.0	cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.4.0.0:::::::*
ibm	tivoli_storage_manager_for_virtual_environments	6.4.1.0	cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.4.1.0:::::::*
ibm	tivoli_storage_manager_for_virtual_environments	7.1.0.0	cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:7.1.0.0:::::::*
ibm	tivoli_storage_manager_for_virtual_environments	7.1.0.1	cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:7.1.0.1:::::::*
ibm	tivoli_storage_manager_for_virtual_environments	7.1.0.2	cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:7.1.0.2:::::::*