NVD

Id
26265  
Name
CVE-2015-4950  
Description
The mailbox-restore feature in IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 6.1 before 6.1.3.6, 6.3 before 6.3.1.3, 6.4 before 6.4.1.4, and 7.1 before 7.1.0.2; Tivoli Storage FlashCopy Manager: FlashCopy Manager for Microsoft Exchange Server 2.1, 2.2, 3.1 before 3.1.1.5, 3.2 before 3.2.1.7, and 4.1 before 4.1.1; and Tivoli Storage Manager FastBack for Microsoft Exchange 6.1 before 6.1.5.4 does not ensure that the correct mailbox is selected, which allows remote authenticated users to obtain sensitive information via a duplicate alias name.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-08-23  
Modified Date
2016-12-07  
Seq
2015-4950  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
139081 26265 CVE-2015-4950 IT04251  View
139082 26265 CVE-2015-4950 IT04252  View
139083 26265 CVE-2015-4950 http://www-01.ibm.com/support/docview.wss?uid=swg21963629  View
139084 26265 CVE-2015-4950 1033652  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9107 JVNDB-2015-004427 複数の IBM Tivoli Storage 製品のメールボックスリストア機能における重要な情報を取得される脆弱性 IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server、Tivoli Storage FlashCopy Manager: FlashCopy Manager for Microsoft Exchange Server および Tivoli Storage Manager FastBack for Microsoft Exchange の メールボックスリストア機能は、正しいメールボックスが選択されたかを確認しないため、重要な情報を取得される脆弱性が存在します。 CVE-2015-4950 82175 CVE-2015-4950 26265 4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004427.html 2015-08-10 2015-08-26 View