PT-2007-6783 · Ibm · Ibm Tivoli Continuous Data Protection For Files

Publicado 2007-11-05 · Atualizado 2017-07-29 · CVE-2007-5819

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Continuous Data Protection for Files (CDP) version 3.1.0

Description The issue concerns weak permissions in the Central Admin Global download directory, allowing local users to place arbitrary files into a location used for updating CDP clients. This could potentially lead to unauthorized updates or malicious file placement.

Recommendations For version 3.1.0, restrict write access to the Central Admin Global download directory to prevent local users from placing arbitrary files, thereby minimizing the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-5819

Produtos afetados

Ibm Tivoli Continuous Data Protection For Files

Referências · 6

• http://secunia.com/advisories/27473 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38215 · Nota
• http://vupen.com/english/advisories/2007/3683 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5819 · Nota de Segurança
• http://securityfocus.com/bid/26293 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg1IC54264 · Aviso do Fabricante