Lucene search
HistoryNov 05, 2007 - 6:46 p.m.
CVE-2007-5819
ibm
tivoli
cdp
weak permissions
arbitrary file
security vulnerability
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
IBM Tivoli Continuous Data Protection for Files (CDP) 3.1.0 uses weak permissions (unrestricted write) for the Central Admin Global download directory, which allows local users to place arbitrary files into a location used for updating CDP clients.
Affected configurations
Node
ibmtivoli_continuous_data_protection_for_filesMatch3.1.0
Related
nvd
nvd
CVE-2007-5819
2007-11-05 18:46:00
prion
prion
Design/Logic Flaw
2007-11-05 18:46:00
cvelist
cvelist
CVE-2007-5819
2007-11-05 18:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2007-5819