PT-2017-8882 · Ibm · Ibm Tivoli Monitoring

Publicado 2017-06-27 · Atualizado 2017-07-05 · CVE-2016-6083

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring V6

Description The issue allows an unauthenticated user to access SOAP queries, potentially exposing sensitive information.

Recommendations For IBM Tivoli Monitoring V6, restrict access to SOAP queries to prevent unauthorized exposure of sensitive information. Consider implementing authentication mechanisms for SOAP query access until a more permanent solution is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-6083

Produtos afetados

Ibm Tivoli Monitoring

Referências · 5

• http://ibm.com/support/docview.wss?uid=swg22000909 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-6083 · Aviso do Fabricante
• http://securityfocus.com/bid/99259 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-6083 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/117696 · Aviso do Fabricante