CVE-2013-5371 in IBM Tivoli Storage Manager Windows Client

Summary

The client in IBM Tivoli Storage Manager (TSM) 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System (ReFS) files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations.

Reservation

08/22/2013

Disclosure

01/23/2014

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
12053	IBM Tivoli Storage Manager Windows Client Resilient File System Stored access control	264	Proof-of-Concept	Official fix	CVE-2013-5371