VULNERABILITY INTELLIGENCE
CVE-2013-5371
CVSS score2.1 LOW
EPSS probability0.38%
CISA KEVNot currently listed
Published2014-01-23
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Description
The client in IBM Tivoli Storage Manager (TSM) 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System (ReFS) files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations.
Primary references
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108