Lucene search

IbmCVE-2015-5003

HistoryJan 03, 2016 - 5:59 a.m.

CVE-2015-5003

2016-01-0305:59:02

CWE-77

ibm

web.nvd.nist.gov

ibm

tivoli monitoring

itm

cve-2015-5003

remote execution

command injection

security vulnerability

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

CVSS3

8.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.007

Percentile

79.6%

JSON

The portal in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands by leveraging Take Action view authority and providing crafted input.

Affected configurations

Nvd

Node

ibmtivoli_monitoringMatch6.2.2

ibmtivoli_monitoringMatch6.2.3

ibmtivoli_monitoringMatch6.3.0

VendorProductVersionCPE
ibmtivoli_monitoring6.2.2cpe:2.3:a:ibm:tivoli_monitoring:6.2.2:*:*:*:*:*:*:*
ibmtivoli_monitoring6.2.3cpe:2.3:a:ibm:tivoli_monitoring:6.2.3:*:*:*:*:*:*:*
ibmtivoli_monitoring6.3.0cpe:2.3:a:ibm:tivoli_monitoring:6.3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	tivoli_monitoring	6.2.2	cpe:2.3:a:ibm:tivoli_monitoring:6.2.2:::::::*
ibm	tivoli_monitoring	6.2.3	cpe:2.3:a:ibm:tivoli_monitoring:6.2.3:::::::*
ibm	tivoli_monitoring	6.3.0	cpe:2.3:a:ibm:tivoli_monitoring:6.3.0:::::::*

References

www-01.ibm.com/support/docview.wss?uid=swg1IV77742

www-01.ibm.com/support/docview.wss?uid=swg21970361

www.securitytracker.com/id/1034924

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

CVSS3

8.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.007

Percentile

79.6%

JSON

Related for CVE-2015-5003