VULNERABILITY INTELLIGENCE
CVE-2016-2894
CVSS score2.5 LOW
EPSS probability0.30%
CISA KEVNot currently listed
Published2016-07-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging previous use of a symlink during archive and retrieve actions.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor