PT-2020-17993 · Ibm · Ibm Tivoli Monitoring

Published 2020-04-23 · Updated 2020-04-28 · CVE-2020-4311

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:L/S:U/UI:N/A:H/C:H/I:H/PR:N/AC:H

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring version 6.3.0

Description The issue allows a local attacker to execute arbitrary code on the system by placing a specially crafted file. This enables the attacker to load other DLL files located in the same directory and execute arbitrary code on the system.

Recommendations For IBM Tivoli Monitoring version 6.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-4311

Affected Products

Ibm Tivoli Monitoring

References · 5

• https://osv.dev/vulnerability/CVE-2020-4311 · Vendor Advisory
• https://ibm.com/support/pages/node/6198358 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/177083 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4311 · Security Note
• https://t.me/cvenotify/3102 · Telegram Post