7.1.2

DATE	CVE	VULNERABILITY TITLE	RISK
2016-07-03	CVE-2016-2894	Information Exposure vulnerability in IBM Tivoli Storage Manager IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging previous use of a symlink during archive and retrieve actions. local low complexity ibm CWE-200	2.1
2015-11-04	CVE-2015-4927	Permissions, Privileges, and Access Controls vulnerability in IBM Tivoli Storage Manager The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 before 7.1.3 on Linux and AIX uses world-writable permissions for unspecified files, which allows local users to gain privileges by writing to a file. local low complexity ibm CWE-264	7.2