CVE-2014-6185

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-6185
dsmtca in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.2.3, 6.4 before 6.4.2.2, and 7.1 before 7.1.1.3 does not properly restrict shared-library loading, which allows local users to gain privileges via a crafted DSO file.

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1IT05713
http://www-01.ibm.com/support/docview.wss?uid=swg21695715 Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/98521
http://www-01.ibm.com/support/docview.wss?uid=swg1IT05713
http://www-01.ibm.com/support/docview.wss?uid=swg21695715 Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/98521
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.15:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.4.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.4.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.4.0.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.4.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.4.1.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.4.1.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:6.4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:7.1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_storage_manager:7.1.1.1:*:*:*:*:*:*:*
History

21 Nov 2024, 02:13

Type Values Removed Values Added
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IT05713 - () http://www-01.ibm.com/support/docview.wss?uid=swg1IT05713 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg21695715 - Patch, Vendor Advisory () http://www-01.ibm.com/support/docview.wss?uid=swg21695715 - Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/98521 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/98521 -
Information

Published : 2015-02-13 02:59

Updated : 2025-04-12 10:46

NVD link : CVE-2014-6185

Mitre link : CVE-2014-6185

CVE.ORG link : CVE-2014-6185

JSON object : View

Products Affected

ibm

  • tivoli_storage_manager
CWE
CWE-264

Permissions, Privileges, and Access Controls