CVE-2014-6141
HighSummary
IBM Tivoli Monitoring (ITM) versions 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 through FP05, and 6.3.0 before FP04 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging Take Action view authority to modify in-progress commands.
Risk Assessment
This vulnerability may lead to unauthorized command execution, posing a serious threat to the integrity and security of the system. Organizations may be exposed to attacks that could result in data loss or unauthorized access to systems.
Recommendation
It is recommended to update IBM Tivoli Monitoring to the latest version to mitigate this vulnerability. Additionally, access to the Take Action feature should be restricted to trusted users.
Other vulnerabilities in IBM Tivoli Monitoring
Original NVD description (English source)
IBM Tivoli Monitoring (ITM) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 through FP05, and 6.3.0 before FP04 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging Take Action view authority to modify in-progress commands.