CVE-2019-4140 MEDIUM

CVE-2019-4140

Vendor Ibm
Product Spectrum Protect
Published July 2, 2019
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/UI:N/AV:L/AC:H/C:H/I:H/A:N/S:U/PR:L/RL:O/E:U/RC:C

What the vulnerability does

01Description

IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databases by restoring old data. IBM X-Force ID: 158336.

Key dates

02Disclosure timeline

July 2, 2019 CVE published
September 17, 2024 Record updated