IBM License Metric Tool and BigFix Inventory Information Disclosure Vulnerability (CNVD-2017-00327)

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

IBM License Metric Tool and BigFix Inventory XML External Entity Injection Vulnerability

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

IBM License Metric Tool and BigFix Inventory Open Redirect Vulnerability

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

IBM License Metric Tool and BigFix Inventory Information Disclosure Vulnerability

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

New Relic: CSRF vulnerability that allows an attacker to purge plugin metric data

Vulnerability details A seemingly minor CSRF vulnerability exists in the endpoint that purges plugin metric data. When an admin visits the Agent overview of its account, it will show a button for each plugin that allows the admin to purge the data. This button links to a GET requests that is...

HackerOne: Reward Money Leakage

By monitoring the average bounty amounts of a team, you can infer a certain amount of information about the size of the bounties awarded, even if the team has chosen not to show bounty amounts. we have decided to close this report as Informative as we are okay with the current state of the bounty...

Vulnerabilities in IBM License Metric Tool and Endpoint Manager for Software Use Analysis

IBM License Metric Tool and Endpoint Manager for Software Use Analysis are both products of IBM Corporation. The former is a set of free tools to help IBM Passport Advantage software upgrades and support services customers to determine their processor value unit PVU licensing requirements; the...

Cross site request forgery (csrf)

IBM License Metric Tool 9 before 9.2.1.0 and Endpoint Manager for Software Use Analysis 9 before 9.2.1.0 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information via a REST API request...

CVE-2015-4929

IBM License Metric Tool 9 before 9.2.1.0 and Endpoint Manager for Software Use Analysis 9 before 9.2.1.0 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information via a REST API request...

CVE-2015-4929

IBM License Metric Tool 9 before 9.2.1.0 and Endpoint Manager for Software Use Analysis 9 before 9.2.1.0 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information via a REST API request...

CVE-2015-4929

CVE-2015-4929 affects IBM License Metric Tool v9 (and IBM Endpoint Manager for Software Use Analysis v9) where the REST API mishandles requests, allowing a remote authenticated attacker to bypass access restrictions and extract sensitive information. IBM’s security bulletin identifies the root ca...

CVE-2015-4929: Exposure of Sensitive Information to an Unauthorized Actor

IBM License Metric Tool 9 before 9.2.1.0 and Endpoint Manager for Software Use Analysis 9 before 9.2.1.0 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information via a REST API request...

PT-2015-6725

Name of the Vulnerable Software and Affected Versions IBM License Metric Tool versions prior to 9.2.1.0 IBM Endpoint Manager for Software Use Analysis versions prior to 9.2.1.0 Description The issue allows remote authenticated users to bypass intended access restrictions and obtain sensitive...

Multiple IBM Product Denial of Service Vulnerabilities (CNVD-2015-03496)

IBM manufactures and sells computer hardware and software, and provides consulting services for systems architecture and web hosting. Common Inventory Technology CIT versions prior to 2.7.0.2050 are used in IBM License Metric Tool versions 7.2.2, 7.5 and 9, Endpoint Manger for Software Use Analys...

Multiple IBM Product Denial of Service Vulnerabilities (CNVD-2015-03487)

IBM manufactures and sells computer hardware and software, and provides consulting services for systems architecture and web hosting. Common Inventory Technology CIT versions prior to 2.7.0.2050 are used in IBM License Metric Tool versions 7.2.2, 7.5 and 9, Endpoint Manger for Software Use Analys...

IBM License Metric Tool and Endpoint Manager for Software Use Analysis Cross-Site Request Forgery Vulnerability

IBM License Metric Tool is a free tool that helps IBM Passport Advantage customers determine their processor value unit PVU licensing needs; IBM Endpoint Manager for Software Use Analysis is a solution that enables overall software asset management by accurately discovering whether software in al...

IBM License Metric Tool and Endpoint Manager for Software Use Analysis Clickjacking Vulnerability

IBM License Metric Tool is a free tool that helps IBM Passport Advantage customers determine their processor value unit PVU licensing needs; IBM Endpoint Manager for Software Use Analysis is a solution that enables overall software asset management by accurately discovering whether software in al...

CVE-2014-8927

Common Inventory Technology CIT before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service CPU consumption or application crash via a...

CVE-2014-8926

Common Inventory Technology CIT before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service CPU consumption or application crash via a...

CVE-2014-4778

IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 do not send an X-Frame-Options HTTP header in response to requests for the login page, which allows remote attackers to conduct clickjacking attacks via vectors involving a FRAME element...