Security Bulletin: IBM Tivoli Monitoring Agent Framework component. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9843)

Summary IBM Tivoli Monitoring uses zlib compression library in both the General services library and the File Transfer component. This bulletin address several reported vulnerabilities in the zlib compression library. Vulnerability Details CVEID: CVE-2016-9840 DESCRIPTION: zlib is vulnerable to a...

Security Bulletin: IBM Tivoli Monitoring Basic Services component. (CVE-2016-2183)

Summary Vulnerability in GSKit component of IBM Tivoli Monitoring has been addressed. Vulnerability Details CVEID: CVE-2016-2183 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the DES/3DES cipher, used as a part of the SSL/TLS protocol. B...

Security Bulletin: IBM Tivoli Monitoring embedded WebSphere Application Server (CVE-2014-0453, CVE-2014-0460, CVE-2014-0878 )

Summary The following security issues have been identified in WebSphere Application Server included as part of IBM Tivoli Monitoring portal server. Vulnerability Details The IBM WebSphere Application Server is shipped with an IBM SDK for Java that is based on the Oracle JDK. Oracle has released...

Security Bulletin: IBM Tivoli Monitoring embedded WebSphere Application Server (CVE-2015-1920)

Summary The following security issue has been identified in WebSphere Application Server included as part of IBM Tivoli Monitoring ITM portal server. Vulnerability Details CVEID: CVE-2015-1920 DESCRIPTION: WebSphere Application Server could allow a remote attacker to execute arbitrary code by...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Tivoli Monitoring (CVE-2015-4000)

Summary The Logjam vulnerability in TLS connections using the Diffie-Hellman DH key exchange protocol affects some components of IBM Tivoli Monitoring ITM. Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information, cause...

Symantec Management Console Multiple XSS and XXE Vulnerabilities (SYM17-005)

The version of Symantec Manager Console running on the remote host is earlier then ITM 8.1 RU1, ITMS 8.0POSTHF6 or ITMS 7.6POSTHF7 and is therefore affected by multiple cross-site scripting XSS and XML External Entity XXE processing vulnerabilities. C Tenable Network Security, Inc...

Stack overflow

Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring ITM 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors...

CVE-2016-2946

CVE-2016-2946 affects IBM Tivoli Monitoring (ITM) Shared Libraries “ax” on UNIX/Linux. A stack-based buffer overflow in the ax component of ITM Agent can allow a local attacker to gain root privileges. Affected: ax shared libraries bundled with ITM 6.2.2 (before FP9), 6.2.3 (before FP5), and 6.3....

CVE-2016-2946: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring ITM 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors...

CVE-2015-7411

IBM Tivoli Monitoring (ITM) portal client v6.2.2–6.3.0 FP6 includes a Privileges Escalation vulnerability (CVE-2015-7411) that allows an authenticated user to increase authority and run commands they should not have. Affects the portal server component; exploit would enable administrator-level ac...

PT-2016-3764

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring ITM versions 6.2.2 through 6.2.2 FP9 IBM Tivoli Monitoring ITM versions 6.2.3 through 6.2.3 FP5 IBM Tivoli Monitoring ITM versions 6.3.0 through 6.3.0 FP6 Description The issue allows remote authenticated users to gain...

Input validation

The portal in IBM Tivoli Monitoring ITM 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands by leveraging Take Action view authority and providing crafted input...

CVE-2015-5003

IBM Tivoli Monitoring (ITM) portal server is affected by CVE-2015-5003. A remote code execution vulnerability exists when a portal client user with Take Action view authority provides crafted input to execute arbitrary commands on the remote ITM system. Affected portal server versions are 6.3.0 b...

PT-2016-3649

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring ITM versions 6.2.2 through 6.2.2 FP9 IBM Tivoli Monitoring ITM versions 6.2.3 through 6.2.3 FP5 IBM Tivoli Monitoring ITM versions 6.3.0 before 6.3.0 FP7 Description The issue allows remote authenticated users to execute...

CVE-2014-6141

CVE-2014-6141 affects IBM Tivoli Monitoring (ITM) versions 6.0.x through FP03, 6.2.x (various FPs listed) and 6.3.0 before FP04. The issue allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by abusing the Take Action view authority to modify in...

PT-2015-3821

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring ITM versions 6.2.0 through 6.2.3, 6.3.0 before FP04 Description The issue allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands. This is achieved by leveraging Take Action...

CVE-2014-6141: Undefined Security Weakness

IBM Tivoli Monitoring ITM 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 through FP05, and 6.3.0 before FP04 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging Take Action view authority to modify in-progress...

CVE-2013-5467

CVE-2013-5467 is a privilege-escalation vulnerability in IBM Tivoli Monitoring (ITM) components on UNIX/Linux. IBM’s Security Bulletin and related entries indicate a local user could gain elevated privileges via the Monitoring Agent for UNIX Logs (versions 6.2.0 FP03 up to 6.2.3 FP04/FP01 across ...

Code injection

Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and Monitoring Server ms and Shared Libraries ax 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP08, 6.2.3 through FP01, and 6.3.0 through FP01 in IBM Tivoli Monitoring ITM on...

PT-2014-2934

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring ITM versions 6.2.0 through FP03 IBM Tivoli Monitoring ITM versions 6.2.1 through FP04 IBM Tivoli Monitoring ITM versions 6.2.2 through FP09 IBM Tivoli Monitoring ITM versions 6.2.3 through FP04 IBM Tivoli Monitoring ITM...