Description
IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging previous use of a symlink during archive and retrieve actions.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21985579
- IT13686 vendor-advisory
- 91534 vdb-entry
- 1036220 vdb-entry