PT-2000-2018 · Ibm · Tivoli Lightweight Client Framework+2

Publicado 2000-12-31 · Atualizado 2017-07-20 · CVE-2000-1239

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Tivoli Management Framework version 3.7.1

Description The issue concerns the HTTP interface of the Tivoli Lightweight Client Framework in IBM Tivoli Management Framework. It allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files. This is achieved through an unspecified manipulation of log files, as the http disable setting is set to zero during installation.

Recommendations For IBM Tivoli Management Framework version 3.7.1, consider restricting access to the log files to prevent manipulation and ensure that file permissions on Tivoli Endpoint Configuration data files are properly set to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2000-1239

Produtos afetados

Ibm Tivoli Management Framework

Tivoli Endpoint Configuration

Tivoli Lightweight Client Framework

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/3927 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg21082896 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-1239 · Nota de Segurança
• http://securityfocus.com/bid/17085 · Nota