CVEvulnerability
CVE-2013-4040
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-05-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-275
Description
IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2.x before 7.2.1.5 and 7.2.x before 7.2.2.0 on Unix use weak permissions (755) for unspecified configuration and log files, which allows local users to obtain sensitive information by reading the files. IBM X-Force ID: 86176.
Affected configurations
• ibm tivoli application dependency discovery manager (>= 7.2.0.0 <= 7.2.1.4)
• ibm tivoli application dependency discovery manager 7.1.2
Related
Weakness · not in database (1)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86176 VDB Entry, Vendor Advisory
- https://www-01.ibm.com/support/docview.wss?uid=swg21672253 Mitigation, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86176 VDB Entry, Vendor Advisory
- https://www-01.ibm.com/support/docview.wss?uid=swg21672253 Mitigation, Patch, Vendor Advisory