CVE-2015-4950: ibm tivoli_storage_fastback_for_microsoft_exchange
Vulnerability summary
CVE-2015-4950 is a medium (CVSS 4.0) vulnerability in ibm tivoli_storage_fastback_for_microsoft_exchange. EPSS estimates a 1.65% chance of exploitation in the next 30 days, higher than 76.2% of scored vulnerabilities.
Timeline
- 23-08-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The mailbox-restore feature in IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 6.1 before 6.1.3.6, 6.3 before 6.3.1.3, 6.4 before 6.4.1.4, and 7.1 before 7.1.0.2; Tivoli Storage FlashCopy Manager: FlashCopy Manager for Microsoft Exchange Server 2.1, 2.2, 3.1 before 3.1.1.5, 3.2 before 3.2.1.7, and 4.1 before 4.1.1; and Tivoli Storage Manager FastBack for Microsoft Exchange 6.1 before 6.1.5.4 does not ensure that the correct mailbox is selected, which allows remote authenticated users to obtain sensitive information via a duplicate alias name.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.65%
Chance of exploitation in the next 30 days
Percentile
76%
Versus all other CVEs
30-day change
0.00 pp
From 1.65% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ibm3 products
- tivoli_storage_fastback_for_microsoft_exchange6.1
- tivoli_storage_flashcopy_manager_for_microsoft_exchange_server2.1 | 2.2 | 3.1 | 3.2 | 4.1
- tivoli_storage_manager_for_mail_data_protection_for_microsoft_exchange_server6.1 | 6.1.1 | 6.1.2 | 6.1.3 | 6.3 | 6.3.1 | 6.4 | 6.4.1 | 7.1
1 vendor · 3 products