CVE-2011-2330

2011-06-0220:55:00

CWE-264

[email protected]

web.nvd.nist.gov

ibm

tivoli

management framework

cve-2011-2330

security vulnerability

remote attack

6.4 Medium

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

69.1%

JSON

Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 has an unspecified “built-in account” that is “trivially” accessed, which makes it easier for remote attackers to send requests to restricted pages via a session on TCP port 9495, a different vulnerability than CVE-2011-1220.

CPENameOperatorVersion
ibm:tivoli_management_frameworkibm tivoli management frameworkeq4.3.1
ibm:tivoli_management_frameworkibm tivoli management frameworkeq3.7.1
ibm:tivoli_management_frameworkibm tivoli management frameworkeq4.1
ibm:tivoli_management_frameworkibm tivoli management frameworkeq4.1.1

CPE	Name	Operator	Version
ibm:tivoli_management_framework	ibm tivoli management framework	eq	4.3.1
ibm:tivoli_management_framework	ibm tivoli management framework	eq	3.7.1
ibm:tivoli_management_framework	ibm tivoli management framework	eq	4.1
ibm:tivoli_management_framework	ibm tivoli management framework	eq	4.1.1