PT-2020-10979 · Ibm · Ibm Tivoli Monitoring Service

Published 2020-02-13 · Updated 2020-08-24 · CVE-2019-4592

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring Service versions 6.3.0.7.3 through 6.3.0.7.10

Description The issue could allow an unauthorized user to access and modify operation aspects of the ITM monitoring server, possibly leading to an effective denial of service or disabling of the monitoring server.

Recommendations For versions 6.3.0.7.3 through 6.3.0.7.10, consider restricting access to the ITM monitoring server to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-4592

Affected Products

Ibm Tivoli Monitoring Service

References · 5

• https://ibm.com/support/pages/node/2278617 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4592 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4592 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/167647 · Vendor Advisory
• https://t.me/cvenotify/989 · Telegram Post