PT-2015-6725 · Ibm · Ibm Endpoint Manager For Software Use Analysis+1

Published 2015-10-11 · Updated 2016-12-08 · CVE-2015-4929

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM License Metric Tool versions prior to 9.2.1.0 IBM Endpoint Manager for Software Use Analysis versions prior to 9.2.1.0

Description The issue allows remote authenticated users to bypass intended access restrictions and obtain sensitive information via a REST API request.

Recommendations For IBM License Metric Tool versions prior to 9.2.1.0, update to version 9.2.1.0 or later. For IBM Endpoint Manager for Software Use Analysis versions prior to 9.2.1.0, update to version 9.2.1.0 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-4929

Affected Products

Ibm Endpoint Manager For Software Use Analysis

Ibm License Metric Tool

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-4929 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21966169 · Vendor Advisory
• http://securitytracker.com/id/1033758 · Note