| Package | Affected versions | Patched versions |
|---|---|---|
| tivoli storage manager | = 5.5= 5.5.0= 5.5.2= 5.5.3= 5.5.4= 5.5.4.1= 5.5.4.2= 5.5.4.3= 6.1= 6.1.0= 6.1.1= 6.1.2= 6.1.3= 6.1.4= 6.1.5= 6.1.5.4= 6.1.5.5= 6.1.5.6= 6.2= 6.2.0= 6.2.1= 6.2.2= 6.2.3= 6.2.4= 6.2.4.7= 6.3= 6.3.0= 6.3.0.15= 6.3.0.17= 6.3.0.5= 6.3.1= 6.3.1.2= 6.3.2.2= 6.4= 6.4.0= 6.4.0.1= 6.4.0.4= 6.4.0.5= 6.4.0.7= 6.4.1.3= 6.4.1.7= 6.4.2.1= 6.4.2.100= 6.4.2.200= 6.4.3= 6.4.3.1= 7.1= 7.1..5.100= 7.1.0.1= 7.1.0.2= 7.1.0.3= 7.1.1= 7.1.1.1= 7.1.1.100= 7.1.1.200= 7.1.1.300= 7.1.2= 7.1.3= 7.1.3.000= 7.1.3.1= 7.1.3.100= 7.1.3.2= 7.1.4= 7.1.4.1= 7.1.5= 7.1.5.200 |
IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging previous use of a symlink during archive and retrieve actions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free