Ibm · Ibm Tivoli Monitoring · CVE-2017-1794
Name of the Vulnerable Software and Affected Versions:
IBM Tivoli Monitoring versions 6.2.3 through 6.2.3.5
IBM Tivoli Monitoring versions 6.3.0 through 6.3.0.7
Description:
The issue affects IBM Tivoli Monitoring, allowing for TEPS user privilege escalation and possible denial of service due to unconstrained memory growth.
Recommendations:
For versions 6.2.3 through 6.2.3.5, update to a version outside of this range to mitigate the risk.
For versions 6.3.0 through 6.3.0.7, update to a version outside of this range to mitigate the risk.
As a temporary workaround, consider restricting access to TEPS to minimize the risk of privilege escalation.