CVE-2014-6185: dsmtca in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.2.3, 6.4 before 6.4.2.2, and 7.1 be...

Security readout for executives and security teams

This flaw lets a local user on an affected IBM Tivoli Storage Manager client potentially gain higher privileges by abusing unsafe shared-library loading in dsmtca. It is not described as remotely exploitable, but it matters on shared servers because backup software often runs with elevated trust. Exposure is likely limited to systems running the affected IBM Tivoli Storage Manager client versions, especially multi-user Unix-like hosts where local users can access the client environment. The bundle does not provide reliable CPE data. Treat as a targeted remediation item for legacy backup infrastructure. It is not evidenced as internet-facing or actively exploited, but privilege escalation in backup tooling can increase impact after any local compromise. Mitigation focus: Upgrade TSM 6.3 clients to 6.3.2.3 or later.; Upgrade TSM 6.4 clients to 6.4.2.2 or later.; Upgrade TSM 7.1 clients to 7.1.1.3 or later..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.