CVE-2020-10657

Summary (CVE-2020-10657): Proofpoint Insider Threat Management Server (formerly ObserveIT Server) prior to version 7.9.1 contains a vulnerability in the ITM web console’s ImportAlertRules feature. The issue is caused by improper deserialization, allowing an authenticated remote attacker with admi...

Security Bulletin: IBM Tivoli Monitoring Basic Services component (CVE-2019-15903)

Summary Fixes a vulnerability reported in the libexpat parser that is used by IBM Tivoli Monitoring for parsing various configuration xml files as well as parsing soap requests. Vulnerability Details CVEID: CVE-2019-15903 DESCRIPTION: libexpat is vulnerable to a denial of service, caused by a...

Security Bulletin: Authentication bypass in IBM Tivoli Monitoring Service console

Summary The following security issues has been identified in the IBM Tivoli Monitoring Service console. Vulnerability Details CVEID: CVE-2019-4592 DESCRIPTION: IBM Tivoli Monitoring Service could allow an unauthorized user to access and modify operation aspects of the ITM monitoring server possib...

Security Bulletin: A security vulnerability has been identified in IBM Tivoli Monitoring shipped with IBM Systems Director Editions(CVE-2016-0603)

Summary IBM Tivoli Monitoring is shipped as a component of IBM Systems Director Editions. Information about a security vulnerability affecting IBM Tivoli Monitoring has been published in a security bulletin. Vulnerability Details Please consult the security bulletins listed below for the...

Security Bulletin: IBM Tivoli Monitoring Agent Framework component. (CVE-2016-9840, CVE-2016-9841, CVE-2016-9843)

Summary IBM Tivoli Monitoring uses zlib compression library in both the General services library and the File Transfer component. This bulletin address several reported vulnerabilities in the zlib compression library. Vulnerability Details CVEID: CVE-2016-9840 DESCRIPTION: zlib is vulnerable to a...

Security Bulletin: IBM Tivoli Monitoring Basic Services component. (CVE-2016-2183)

Summary Vulnerability in GSKit component of IBM Tivoli Monitoring has been addressed. Vulnerability Details CVEID: CVE-2016-2183 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the DES/3DES cipher, used as a part of the SSL/TLS protocol. B...

Security Bulletin: IBM Tivoli Monitoring embedded WebSphere Application Server (CVE-2014-0453, CVE-2014-0460, CVE-2014-0878 )

Summary The following security issues have been identified in WebSphere Application Server included as part of IBM Tivoli Monitoring portal server. Vulnerability Details The IBM WebSphere Application Server is shipped with an IBM SDK for Java that is based on the Oracle JDK. Oracle has released...

Security Bulletin: IBM Tivoli Monitoring embedded WebSphere Application Server (CVE-2015-1920)

Summary The following security issue has been identified in WebSphere Application Server included as part of IBM Tivoli Monitoring ITM portal server. Vulnerability Details CVEID: CVE-2015-1920 DESCRIPTION: WebSphere Application Server could allow a remote attacker to execute arbitrary code by...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Tivoli Monitoring (CVE-2015-4000)

Summary The Logjam vulnerability in TLS connections using the Diffie-Hellman DH key exchange protocol affects some components of IBM Tivoli Monitoring ITM. Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information, cause...

Symantec Management Console Multiple XSS and XXE Vulnerabilities (SYM17-005)

The version of Symantec Manager Console running on the remote host is earlier then ITM 8.1 RU1, ITMS 8.0POSTHF6 or ITMS 7.6POSTHF7 and is therefore affected by multiple cross-site scripting XSS and XML External Entity XXE processing vulnerabilities. C Tenable Network Security, Inc...

Stack overflow

Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring ITM 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors...

CVE-2016-2946

CVE-2016-2946 affects IBM Tivoli Monitoring (ITM) Shared Libraries “ax” on UNIX/Linux. A stack-based buffer overflow in the ax component of ITM Agent can allow a local attacker to gain root privileges. Affected: ax shared libraries bundled with ITM 6.2.2 (before FP9), 6.2.3 (before FP5), and 6.3....

CVE-2015-7411

IBM Tivoli Monitoring (ITM) portal client v6.2.2–6.3.0 FP6 includes a Privileges Escalation vulnerability (CVE-2015-7411) that allows an authenticated user to increase authority and run commands they should not have. Affects the portal server component; exploit would enable administrator-level ac...

Input validation

The portal in IBM Tivoli Monitoring ITM 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands by leveraging Take Action view authority and providing crafted input...

CVE-2015-5003

IBM Tivoli Monitoring (ITM) portal server is affected by CVE-2015-5003. A remote code execution vulnerability exists when a portal client user with Take Action view authority provides crafted input to execute arbitrary commands on the remote ITM system. Affected portal server versions are 6.3.0 b...

CVE-2014-6141

CVE-2014-6141 affects IBM Tivoli Monitoring (ITM) versions 6.0.x through FP03, 6.2.x (various FPs listed) and 6.3.0 before FP04. The issue allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by abusing the Take Action view authority to modify in...

CVE-2013-5467

CVE-2013-5467 is a privilege-escalation vulnerability in IBM Tivoli Monitoring (ITM) components on UNIX/Linux. IBM’s Security Bulletin and related entries indicate a local user could gain elevated privileges via the Monitoring Agent for UNIX Logs (versions 6.2.0 FP03 up to 6.2.3 FP04/FP01 across ...

Code injection

Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and Monitoring Server ms and Shared Libraries ax 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP08, 6.2.3 through FP01, and 6.3.0 through FP01 in IBM Tivoli Monitoring ITM on...

CVE-2013-5562

CVE-2013-5562 affects the ITM web server in Cisco Prime Central for Hosted Collaboration Solution (HCS). A remote attacker can cause a denial-of-service (temporary HTTP service outage) by flooding the ITM port with TCP packets. Root cause is the ITM port’s inability to handle a TCP flood. Exploit...

Cisco Prime Central for Hosted Collaboration Solution Denial of Service Vulnerability

A vulnerability in the ITM web server interface of the Cisco Prime Central for Hosted Collaboration Solution HCS could allow an unauthenticated, remote attacker to cause a denial of service on the targeted device. The vulnerability is due to the ITM port being unable to deal with a TCP flood. An...