VULNERABILITY INTELLIGENCE
CVE-2013-6335
CVSS score3.3 LOW
EPSS probability0.34%
CISA KEVNot currently listed
Published2014-08-26
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:N
Description
The Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations.
Weakness classification
- CWE-281: Improper Preservation of Permissions
Primary references
- psirt@us.ibm.com — Third Party Advisory
- psirt@us.ibm.com — Broken Link
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com — VDB Entry, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — VDB Entry, Vendor Advisory