Security Bulletin: IBM Tivoli Monitoring Remote Code Execution (CVE-2015-5003)

Summary An IBM Tivoli Monitoring portal client user account that has view authority for Take Action commands can provide specially crafted input to have additional commands executed on the remote IBM Tivoli Monitoring system.. Vulnerability Details CVEID: CVE-2015-5003 DESCRIPTION: An IBM Tivoli...

CVE-2015-5003

IBM Tivoli Monitoring (ITM) portal server is affected by CVE-2015-5003. A remote code execution vulnerability exists when a portal client user with Take Action view authority provides crafted input to execute arbitrary commands on the remote ITM system. Affected portal server versions are 6.3.0 b...