« Volver al listado

CVE-2013-6713

Estado: ModificadaMedia (4.1)—

The Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments (TSMVE) 6.3 through 7.1.0.2 does not properly check authorization for backup and restore operations, which allows local users to obtain sensitive VM data or cause a denial of service (disk consumption) via unspecified GUI actions.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Tivoli Storage Manager FOR Virtual Environments

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-6713",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 2.7,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-26T19:55:04.140",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21673051",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89055",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21673051",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89055",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments (TSMVE) 6.3 through 7.1.0.2 does not properly check authorization for backup and restore operations, which allows local users to obtain sensitive VM data or cause a denial of service (disk consumption) via unspecified GUI actions."
    },
    {
      "lang": "es",
      "value": "El componente Data Protection For VMware en IBM Tivoli Storage Manager For Virtual Environments (TSMVE) 6.3 hasta 7.1.0.2 no comprueba debidamente autorización para operaciones de copia de seguridad y restauración, lo que permite a usuarios locales obtener datos VM sensibles o causar una denegación de servicio (consumo de disco) a través de acciones GUI no especificadas."
    }
  ],
  "lastModified": "2026-06-17T00:00:50.763",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90CF2B22-6678-4A35-84E0-878D0C9839DA"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "492383B7-460A-4FAF-8C93-085B65B7B65A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D781D77-1E23-40E8-A501-9B884E9AFE3B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4679AC05-88C8-4D60-B0B8-60CF9F6C547C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.3.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "462ED865-0D6B-46A6-A6D2-6655FF7978DD"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.4.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D4E3501-CED0-428C-A197-63035FA11829"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:6.4.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E1952DA2-A076-452B-A535-04A2FFEC43BA"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:7.1.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52D024AA-61A2-448D-930B-CB7852D2FFB9"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:7.1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A8BF06A8-99A6-4D4F-ADF4-B2F142BCE843"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_virtual_environments:7.1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9FB08F5F-A891-4483-98BC-954A6D89BB03"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}