PT-2018-6595
CVE-2017-1794
·
Published
2018-09-19
·
Updated
2019-10-09
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
IBM Tivoli Monitoring versions 6.2.3 through 6.2.3.5
IBM Tivoli Monitoring versions 6.3.0 through 6.3.0.7
Description:
The issue affects IBM Tivoli Monitoring, allowing for TEPS user privilege escalation and possible denial of service due to unconstrained memory growth.
Recommendations:
For versions 6.2.3 through 6.2.3.5, update to a version outside of this range to mitigate the risk.
For versions 6.3.0 through 6.3.0.7, update to a version outside of this range to mitigate the risk.
As a temporary workaround, consider restricting access to TEPS to minimize the risk of privilege escalation.
Found an issue in the description? Have something to add? Feel free to write us 👾