CVEvulnerability
CVE-2014-6148
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-10-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-287
Description
IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 through 7.2.1.6, and 7.2.2.0 through 7.2.2.2 does not require TADDM authentication for rptdesign downloads, which allows remote authenticated users to obtain sensitive database information via a crafted URL.
Affected configurations
• ibm tivoli application dependency discovery manager 7.2.0.0
• ibm tivoli application dependency discovery manager 7.2.0.1
• ibm tivoli application dependency discovery manager 7.2.0.2
• ibm tivoli application dependency discovery manager 7.2.0.3
• ibm tivoli application dependency discovery manager 7.2.0.4
• ibm tivoli application dependency discovery manager 7.2.0.5
• ibm tivoli application dependency discovery manager 7.2.0.6
• ibm tivoli application dependency discovery manager 7.2.0.7
• ibm tivoli application dependency discovery manager 7.2.0.8
• ibm tivoli application dependency discovery manager 7.2.0.9
• ibm tivoli application dependency discovery manager 7.2.0.10
• ibm tivoli application dependency discovery manager 7.2.1
• ibm tivoli application dependency discovery manager 7.2.1.1
• ibm tivoli application dependency discovery manager 7.2.1.2
• ibm tivoli application dependency discovery manager 7.2.1.3
• ibm tivoli application dependency discovery manager 7.2.1.4
• ibm tivoli application dependency discovery manager 7.2.1.5
• ibm tivoli application dependency discovery manager 7.2.1.6
• ibm tivoli application dependency discovery manager 7.2.2
• ibm tivoli application dependency discovery manager 7.2.2.1
• ibm tivoli application dependency discovery manager 7.2.2.2
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://secunia.com/advisories/61785 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21688549 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/70842 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96918 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/61785 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21688549 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/70842 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96918 exchange.xforce.ibmcloud.com