CVE-2014-8927

CVE-2014-8927 affects IBM CIT components prior to 2.7.0.2050 in IBM License Metric Tool (7.2.2, 7.5, 9); IBM Endpoint Manager for Software Use Analysis (v9); and Tivoli Asset Discovery for Distributed (7.2.2, 7.5). Root cause is a vulnerability in the XML handling that allows remote attackers to ...

CVE-2014-4778

CVE-2014-4778 concerns IBM License Metric Tool (LM Tool) v9 and IBM Endpoint Manager for Software Use Analysis v9. The issue: the login page response lacks the X-Frame-Options header, enabling clickjacking through framing of the login page. Connected IBM bulletin confirms this and provides remedi...

CVE-2014-4774

CVE-2014-4774 affects IBM License Metric Tool (LM Tool) v9 and IBM Endpoint Manager for Software Use Analysis v9. The login page is vulnerable to CSRF via framing (FRAME) that can hijack user authentication for affected versions before 9.1.0.2. IBM’s security bulletin and related entries confirm ...

CVE-2014-8926

CVE-2014-8926 affects IBM License Metric Tool (CIT) before 2.7.0.2050 in IBM License Metric Tool v7.2.2, v7.5, and v9; IBM Endpoint Manger for Software Use Analysis v9; and Tivoli Asset Discovery for Distributed v7.2.2 and v7.5. A crafted XML query can cause denial of service via CPU consumption ...

CVE-2015-1915

The CVE-2015-1915 issue affects IBM Tivoli Endpoint Manager for Lifecycle Management’s Endpoint Manager for Remote Control component. Specifically, 9.0.1 before IF6 and 9.1.0 before IF6 fail to set the secure flag on session cookies in HTTPS sessions, allowing an attacker to capture cookies by in...