CVEvulnerability
CVE-2007-5819
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2007-11-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
IBM Tivoli Continuous Data Protection for Files (CDP) 3.1.0 uses weak permissions (unrestricted write) for the Central Admin Global download directory, which allows local users to place arbitrary files into a location used for updating CDP clients.
Affected configurations
• ibm tivoli continuous data protection for files 3.1.0
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/27473 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1IC54264 www-1.ibm.com
- http://www.securityfocus.com/bid/26293 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3683 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38215 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/27473 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1IC54264 www-1.ibm.com
- http://www.securityfocus.com/bid/26293 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3683 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38215 exchange.xforce.ibmcloud.com