Skip to content
OpenAdvisories
Medium · 5.1 CVE-2019-4236 EUVD-2019-13843GHSA-f96f-9h35-fcwv

A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List (AC…

Published Jul 22, 2019 · Updated Sep 16, 2024 · Assigned by ibm

Description

A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List (ACL) entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to restore or retrieve the object with incorrect ACL entries. IBM X-Force ID: 159418.

Affected products

VendorProductAffectedFixed
IBM Spectrum Protect 7.l —

References