CVEvulnerability
CVE-2017-1794
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-09-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-400
Description
IBM Tivoli Monitoring 6.2.3 through 6.2.3.5 and 6.3.0 through 6.3.0.7 are vulnerable to both TEPS user privilege escalation and possible denial of service due to unconstrained memory growth. IBM X-Force ID: 137039.
Affected configurations
• ibm tivoli monitoring (>= 6.2.3 <= 6.2.3.5)
• ibm tivoli monitoring (>= 6.3.0 <= 6.3.0.7)
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/137039 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/docview.wss?uid=swg22014097 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/137039 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/docview.wss?uid=swg22014097 Vendor Advisory