What’s Vulnerable › Vulnerabilities

CVE-2014-4818

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-02-24 · updated 2026-06-17
• Weakness: CWE-200

Description

dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4.x, 5.5.x, 6.x before 6.4.3, and 7.1.x before 7.1.2 allows local users to discover the backup/restore encryption-key password via unspecified vectors.

Affected products

• IBM Corporation Tivoli Storage Manager: 5.4.0, 5.5, 6.1, 6.2, 6.3, 6.3.3 (+7)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT06016
• http://www-01.ibm.com/support/docview.wss?uid=swg21697022
• http://www.securityfocus.com/bid/72771
• http://www.securitytracker.com/id/1031795
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT06016
• http://www-01.ibm.com/support/docview.wss?uid=swg21697022
• http://www.securityfocus.com/bid/72771
• http://www.securitytracker.com/id/1031795

Get alerted when CVE-2014-4818 or the next vulnerability affects your stack