PT-2025-23088
CVE-2025-3357
·
Published
2025-05-28
·
Updated
2025-06-02
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM Tivoli Monitoring versions 6.3.0.7 through 6.3.0.7 Service Pack 19
Description
The issue allows a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array. This can be exploited without authentication.
Recommendations
For versions 6.3.0.7 through 6.3.0.7 Service Pack 19, update to Service Pack 20 to resolve the issue. As a temporary workaround, consider restricting access to the affected system until the patch is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾