CVE-2017-1635
5.2 Medium
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:A/AC:L/Au:S/C:P/I:P/A:P
8 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8 High
AI Score
Confidence
High
0.01 Low
EPSS
Percentile
83.5%
IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 133243.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | tivoli_monitoring | 6.2.2 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.2:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.2.2 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.2:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.2.3 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.3:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.2.4 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.4:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.2.5 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.5:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.2.6 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.6:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.2.7 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.7:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.2.8 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.8:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.2.9 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.9:*:*:*:*:*:*:* |
CNA Affected
[
{
"product": "Tivoli Monitoring V6",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "6.2.2"
},
{
"status": "affected",
"version": "6.2.2.2"
},
{
"status": "affected",
"version": "6.2.2.3"
},
{
"status": "affected",
"version": "6.2.2.4"
},
{
"status": "affected",
"version": "6.2.2.5"
},
{
"status": "affected",
"version": "6.2.2.6"
},
{
"status": "affected",
"version": "6.2.2.7"
},
{
"status": "affected",
"version": "6.2.2.8"
},
{
"status": "affected",
"version": "6.2.2.9"
}
]
}
]References
Social References
More
Related
5.2 Medium
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:A/AC:L/Au:S/C:P/I:P/A:P
8 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8 High
AI Score
Confidence
High
0.01 Low
EPSS
Percentile
83.5%