CVE-2015-4950: IBM Tivoli Storage Fastback For Microsoft Exchange

Medium severity, CVSS 4.0. EPSS: 1.7% chance of exploitation in the next 30 days.

The mailbox-restore feature in IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 6.1 before 6.1.3.6, 6.3 before 6.3.1.3, 6.4 before 6.4.1.4, and 7.1 before 7.1.0.2; Tivoli Storage FlashCopy Manager: FlashCopy Manager for Microsoft Exchange Server 2.1, 2.2, 3.1 before 3.1.1.5, 3.2 before 3.2.1.7, and 4.1 before 4.1.1; and Tivoli Storage Manager FastBack for Microsoft Exchange 6.1 before 6.1.5.4 does not ensure that the correct mailbox is selected, which allows remote authenticated users to obtain sensitive information via a duplicate alias name.

Affected products

• IBM Tivoli Storage Fastback For Microsoft Exchange: version 6.1 only
• IBM Tivoli Storage Flashcopy Manager For Microsoft Exchange Server: version 2.1 only; version 2.2 only; version 3.1 only; version 3.2 only; version 4.1 only
• IBM Tivoli Storage Manager For Mail Data Protection For Microsoft Exchange Server: version 6.1 only; version 6.1.1 only; version 6.1.2 only; version 6.1.3 only; version 6.3 only; version 6.3.1 only; …

Published 2015-08-23. Last modified 2026-06-17.