What’s Vulnerable › Vulnerabilities

CVE-2015-4950

• Severity: medium (CVSS 4.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-08-23 · updated 2026-06-17
• Weakness: CWE-200

Description

The mailbox-restore feature in IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 6.1 before 6.1.3.6, 6.3 before 6.3.1.3, 6.4 before 6.4.1.4, and 7.1 before 7.1.0.2; Tivoli Storage FlashCopy Manager: FlashCopy Manager for Microsoft Exchange Server 2.1, 2.2, 3.1 before 3.1.1.5, 3.2 before 3.2.1.7, and 4.1 before 4.1.1; and Tivoli Storage Manager FastBack for Microsoft Exchange 6.1 before 6.1.5.4 does not ensure that the correct mailbox is selected, which allows remote authenticated users to obtain sensitive information via a duplicate alias name.

Affected products

• IBM Tivoli Storage Fastback For Microsoft Exchange: 6.1
• IBM Tivoli Storage Flashcopy Manager For Microsoft Exchange Server: 2.1, 2.2, 3.1, 3.2, 4.1
• IBM Tivoli Storage Manager For Mail Data Protection For Microsoft Exchange Server: 6.1, 6.1.1, 6.1.2, 6.1.3, 6.3, 6.3.1 (+3)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT04251
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT04252
• http://www-01.ibm.com/support/docview.wss?uid=swg21963629
• http://www.securitytracker.com/id/1033652
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT04251
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT04252
• http://www-01.ibm.com/support/docview.wss?uid=swg21963629
• http://www.securitytracker.com/id/1033652

Get alerted when CVE-2015-4950 or the next vulnerability affects your stack