Lucene search

[email protected]CVE-2015-7411

HistoryMar 12, 2016 - 2:59 a.m.

CVE-2015-7411

2016-03-1202:59:01

CWE-264

[email protected]

web.nvd.nist.gov

cve-2015-7411

ibm tivoli monitoring

itm

remote authentication

privilege escalation

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

JSON

The portal client in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 through FP6 allows remote authenticated users to gain privileges via unspecified vectors.

Affected configurations

NVD

Node

ibmtivoli_monitoringMatch6.2.2

ibmtivoli_monitoringMatch6.2.2.1

ibmtivoli_monitoringMatch6.2.2.2

ibmtivoli_monitoringMatch6.2.2.3

ibmtivoli_monitoringMatch6.2.2.4

ibmtivoli_monitoringMatch6.2.2.5

ibmtivoli_monitoringMatch6.2.2.6

ibmtivoli_monitoringMatch6.2.2.7

ibmtivoli_monitoringMatch6.2.2.8

ibmtivoli_monitoringMatch6.2.2.9

ibmtivoli_monitoringMatch6.2.3

ibmtivoli_monitoringMatch6.3.0

CPENameOperatorVersion
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.2
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.2.1
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.2.2
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.2.3
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.2.4
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.2.5
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.2.6
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.2.7
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.2.8
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.2.9

CPE	Name	Operator	Version
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.2
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.2.1
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.2.2
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.2.3
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.2.4
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.2.5
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.2.6
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.2.7
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.2.8
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.2.9

Rows per page:

1-10 of 121

References

www-01.ibm.com/support/docview.wss?uid=swg1IV77992

www-01.ibm.com/support/docview.wss?uid=swg21973559

www.securitytracker.com/id/1035240

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

JSON

Related for CVE-2015-7411

prion1 cvelist1 nvd1 ibm1