CVE Vulnerabilities

CVE-2013-3976

Published: Mar 26, 2014 | Modified: Apr 12, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:N/AC:H/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io minimus.io echohq.com

The (1) Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM Tivoli Storage Manager for Mail and the (2) FlashCopy Manager for Exchange component 2.2 and 3.1 before 3.1.1 in IBM Tivoli Storage FlashCopy Manager do not properly constrain mailbox contents during certain PST restore operations, which allows remote authenticated users to read the personal e-mail of other users in opportunistic circumstances by launching an e-mail client after an administrator performs a multiple-mailbox restore.

Affected Software

Name Vendor Start Version End Version
Data_protection Ibm 6.1 (including) 6.1 (including)
Data_protection Ibm 6.3 (including) 6.3 (including)
Flashcopy_manager Ibm 2.1 (including) 2.1 (including)
Flashcopy_manager Ibm 2.2 (including) 2.2 (including)
Flashcopy_manager Ibm 3.1 (including) 3.1 (including)
Tivoli_storage_flashcopy_manager Ibm - (including) - (including)
Tivoli_storage_manager_for_mail Ibm - (including) - (including)

References