CVE-2013-3976

The (1) Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM Tivoli Storage Manager for Mail and the (2) FlashCopy Manager for…

published March 26, 2014

CVSS
—
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

The (1) Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM Tivoli Storage Manager for Mail and the (2) FlashCopy Manager for Exchange component 2.2 and 3.1 before 3.1.1 in IBM Tivoli Storage FlashCopy Manager do not properly constrain mailbox contents during certain PST restore operations, which allows remote authenticated users to read the personal e-mail of other users in opportunistic circumstances by launching an e-mail client after an administrator performs a multiple-mailbox restore.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00946 · 60.8th percentile
Published
2014-03-26T10:00Z
EPSS history
Timeline
  • 26 MAR 10:00Z
    The (1) Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM Tivoli Storage Manager for Mail and the (2) FlashCopy Manager for…
    cvelistv5