CVE-2012-4859

Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x before 6.3.1.0 allows local users to read or modify file system objects via unknown vectors.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1IC87006	Patch Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21615292	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/79843
http://www-01.ibm.com/support/docview.wss?uid=swg1IC87006	Patch Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21615292	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/79843

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management::::::::
	cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:6.1.0:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:6.3.0:::::::*

History

21 Nov 2024, 01:43

Type	Values Removed	Values Added
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg1IC87006 - Patch, Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg1IC87006 - Patch, Vendor Advisory
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg21615292 - Patch, Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg21615292 - Patch, Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/79843 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/79843 -

Information

Published : 2012-12-21 11:47

Updated : 2024-11-21 01:43

NVD link : CVE-2012-4859

Mitre link : CVE-2012-4859

CVE.ORG link : CVE-2012-4859

JSON object : View

Products Affected

ibm

tivoli_storage_manager_for_space_management

CWE

NVD-CWE-noinfo

{"id": "CVE-2012-4859", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-12-21T11:47:36.783", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC87006", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21615292", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79843", "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC87006", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21615292", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79843", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x before 6.3.1.0 allows local users to read or modify file system objects via unknown vectors."}, {"lang": "es", "value": "Una vulnerabilidad no especificada en IBM Tivoli Storage Manager para la gesti\u00f3n de espacio (tambi\u00e9n conocido como TSM HSM) antes de v6.2.5.0 y v6.3.x antes de v6.3.1.0 permite a los usuarios locales leer o modificar los objetos del sistema de archivos a trav\u00e9s de vectores desconocidos.\r\n"}], "lastModified": "2024-11-21T01:43:37.547", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A149A541-ACAF-4D32-BA49-CEC5F2A3A77D", "versionEndIncluding": "6.2.0"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:6.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2DC71CA-97C2-46EF-8082-2056F4D3BB2C"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_space_management:6.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D1030A8-2770-49BF-93EC-8C2FB08C3FCA"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}