Security Bulletin: IBM Tivoli Monitoring Privileges Escalation through Authorization Bypass (CVE-2015-7411)

Summary IBM Tivoli Monitoring ITM portal client could allow an authenticated user to increase their authority and be able to run commands they were not intended to have authority to run as administrator. This can include running commands on remote systems managed by IBM Tivoli Monitoring...

CVE-2015-7411

IBM Tivoli Monitoring (ITM) portal client v6.2.2–6.3.0 FP6 includes a Privileges Escalation vulnerability (CVE-2015-7411) that allows an authenticated user to increase authority and run commands they should not have. Affects the portal server component; exploit would enable administrator-level ac...