Unscored severity · published May 26, 2014
CVE-2013-6713
The Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments (TSMVE) 6.3 through 7.1.0.2 does not properly check authorization for backup and…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments (TSMVE) 6.3 through 7.1.0.2 does not properly check authorization for backup and restore operations, which allows local users to obtain sensitive VM data or cause a denial of service (disk consumption) via unspecified GUI actions.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Tivoli Storage Manager For Virtual Environments · Ibm
6.3.0.0; 6.3.1.0; 6.3.2.0; 6.3.2.1; 6.3.3.0; 6.4.0.0; +4 more · source: NVD
Affected product
TS
Tivoli Storage Manager For Virtual Environments
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-6713
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-6713
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21673051
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/89055
More from Tivoli Storage Manager For Virtual Environments
8.5
CVE-2016-2988
IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 6.4.x before 6.4.3.4 and 7.1.x before 7.1.6 allows…
5.5
CVE-2018-1550
IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other users
–
CVE-2015-1988
Cross-site scripting (XSS) vulnerability in IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware 6.3 before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before…