PT-2014-7067
CVE-2014-6148
·
تاريخ النشر
2014-10-31
·
تاريخ التحديث
2017-09-08
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Tivoli Application Dependency Discovery Manager (TADDM) versions 7.2.0.0 through 7.2.0.10
IBM Tivoli Application Dependency Discovery Manager (TADDM) versions 7.2.1.0 through 7.2.1.6
IBM Tivoli Application Dependency Discovery Manager (TADDM) versions 7.2.2.0 through 7.2.2.2
Description
The issue allows remote authenticated users to obtain sensitive database information via a crafted URL, as TADDM does not require authentication for rptdesign downloads.
Recommendations
For versions 7.2.0.0 through 7.2.0.10, consider implementing authentication for rptdesign downloads to prevent unauthorized access.
For versions 7.2.1.0 through 7.2.1.6, consider implementing authentication for rptdesign downloads to prevent unauthorized access.
For versions 7.2.2.0 through 7.2.2.2, consider implementing authentication for rptdesign downloads to prevent unauthorized access.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾