Lucene search

IBM7A1C51879B26AAB381E9792758DFFE88BBC89BB55B7B6EE8B430DADD37DC4F78

HistoryJun 28, 2023 - 10:11 p.m.

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2018-1797)

2023-06-2822:11:16

www.ibm.com

ibm

websphere

tivoli network manager

ip edition

security bulletin

vulnerability

version 4.2

directory traversal

fix

interim fix

admin console

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C

EPSS

0.001

Percentile

36.2%

JSON

Summary

IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager IP Edition version 4.2. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin Potential directory traversal vulnerability in WebSphere Application Server for vulnerability details and information about fixes.

Affected Products and Versions

IBM Tivoli Network Manager IP Edition 4.2

Remediation/Fixes

Refer to the following security bulletin for vulnerability details and information about fixes addressed by IBM WebSphere Application Server, which is a product required by IBM Tivoli Network Manager IP Edition version 4.2.

Principal Product and Version(s)	Affected Supporting Product and Version	Affected Supporting Product Security Bulletin
IBM Tivoli Network Manager IP Edition 4.2	IBM Tivoli Network Manager IP Edition 4.2 requires the installation of IBM WebSphere Application Server Version 8.5.5.5 or later version separately. Users are recommended to apply IBM WebSphere version 8.5.5.5 Security Interim Fixes.	Potential directory traversal vulnerability in WebSphere Application Server =ibm10729521">Potential traversal vulnerability in IBM WebSphere Application Server Admin Console
See Section “For V8.5.0.0 through 8.5.5.14:”

Workarounds and Mitigations

None.

Affected configurations

Vulners

Node

ibmtivoli_network_manager_ip_editionMatch4.2

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C

EPSS

0.001

Percentile

36.2%

JSON

Related for 7A1C51879B26AAB381E9792758DFFE88BBC89BB55B7B6EE8B430DADD37DC4F78