CVE-2013-4040

Опубликовано: 01 мая 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2.x before 7.2.1.5 and 7.2.x before 7.2.2.0 on Unix use weak permissions (755) for unspecified configuration and log files, which allows local users to obtain sensitive information by reading the files. IBM X-Force ID: 86176.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/86176
VDB Entry
Vendor Advisory
https://www-01.ibm.com/support/docview.wss?uid=swg21672253
Mitigation
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/86176
VDB Entry
Vendor Advisory
https://www-01.ibm.com/support/docview.wss?uid=swg21672253
Mitigation
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:tivoli_application_dependency_discovery_manager:*:*:*:*:*:*:*:*

Версия от 7.2.0.0 (включая) до 7.2.1.4 (включая)

cpe:2.3:a:ibm:tivoli_application_dependency_discovery_manager:7.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 10%

0.00035

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-275

Связанные уязвимости

GHSA-rqm9-jqx8-c9pj