IBM Tivoli Continuous Data Protection for Files Insecure Default Permissions Vulnerability

IBM Tivoli Continuous Data Protection for Files Insecure Default Permissions Vulnerability

IBM Tivoli Continuous Data Protection for Files is prone to an insecure-permissions vulnerability that affects the application's 'Global Download' directory.

Successfully exploiting this issue allows attackers to distribute and execute arbitrary executables to client computers managed by the vulnerable software. This may facilitate the complete compromise of all client computers.

IBM Tivoli Continuous Data Protection for Files 3.1 is vulnerable; other versions may also be affected.