CVE-2014-4817

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-11-18 · updated 2026-06-17
Weakness: CWE-264

Description

The server in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename.

Affected products

IBM Corporation Tivoli Storage Manager: 5.1.0, 5.1.1, 5.1.5, 5.1.6, 5.1.7, 5.1.8 (+78)

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IT04884
http://www-01.ibm.com/support/docview.wss?uid=swg21686874
https://exchange.xforce.ibmcloud.com/vulnerabilities/95444
http://www-01.ibm.com/support/docview.wss?uid=swg1IT04884
http://www-01.ibm.com/support/docview.wss?uid=swg21686874
https://exchange.xforce.ibmcloud.com/vulnerabilities/95444

Get alerted when CVE-2014-4817 or the next vulnerability affects your stack