CVE-2013-6335

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.34%

Published

Aug 26, 2014

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations.

Weaknesses (CWE)

CWE-281

Affected Products (9)

ibm · tivoli_storage_manager (up to 6.2.5.3)vulnerable

ibm · tivoli_storage_manager (up to 6.3.2)vulnerable

ibm · tivoli_storage_manager (up to 6.4.2)vulnerable

ibm · tivoli_storage_manager (up to 7.1.0.3)vulnerable

ibm · aix

linux · linux_kernel

ibm · tivoli_storage_manager (up to 6.1.5.6)vulnerable

hp · hp-ux

oracle · solaris