CVEvulnerability
CVE-2014-6141
8.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-02-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
IBM Tivoli Monitoring (ITM) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 through FP05, and 6.3.0 before FP04 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging Take Action view authority to modify in-progress commands.
Affected configurations
• ibm tivoli monitoring 6.2.0
• ibm tivoli monitoring 6.2.0.1
• ibm tivoli monitoring 6.2.0.2
• ibm tivoli monitoring 6.2.0.3
• ibm tivoli monitoring 6.2.1
• ibm tivoli monitoring 6.2.1.0
• ibm tivoli monitoring 6.2.1.1
• ibm tivoli monitoring 6.2.1.2
• ibm tivoli monitoring 6.2.1.3
• ibm tivoli monitoring 6.2.1.4
• ibm tivoli monitoring 6.2.2
• ibm tivoli monitoring 6.2.2.0
• ibm tivoli monitoring 6.2.2.1
• ibm tivoli monitoring 6.2.2.2
• ibm tivoli monitoring 6.2.2.3
• ibm tivoli monitoring 6.2.2.4
• ibm tivoli monitoring 6.2.2.5
• ibm tivoli monitoring 6.2.2.6
• ibm tivoli monitoring 6.2.2.7
• ibm tivoli monitoring 6.2.2.8
• ibm tivoli monitoring 6.2.2.9
• ibm tivoli monitoring 6.2.3
• ibm tivoli monitoring 6.2.3.0
• ibm tivoli monitoring 6.2.3.1
• ibm tivoli monitoring 6.2.3.2
• ibm tivoli monitoring 6.2.3.3
• ibm tivoli monitoring 6.2.3.4
• ibm tivoli monitoring 6.2.3.5
• ibm tivoli monitoring 6.3.0
• ibm tivoli monitoring 6.3.0.1
• ibm tivoli monitoring 6.3.0.2
• ibm tivoli monitoring 6.3.0.3
• ibm tivoli monitoring 6.3.0.4
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21690932 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96911 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21690932 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96911 exchange.xforce.ibmcloud.com