PT-2017-8817
CVE-2016-5933
·
Published
2017-03-08
·
Updated
2017-03-09
Description by
CVSS 2.0
4.9
MediumMetricsAV:N/AC:M/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Tivoli Monitoring versions 6.2 through 6.3
Description
The issue allows for a possible host header injection attack, which could lead to HTTP cache poisoning or firewall bypass.
Recommendations
For IBM Tivoli Monitoring versions 6.2 through 6.3, update to a version that includes the fix for the host header injection issue, as referenced in IBM Reference #: 1997223.
Found an issue in the description? Have something to add? Feel free to write us 👾