CVE-2015-5003

High

Published: 03/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The portal in IBM Tivoli Monitoring (ITM) versions 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands by leveraging Take Action view authority and providing crafted input.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the system and execution of malicious code, posing a serious threat to the organization's security.

Recommendation

It is recommended to update IBM Tivoli Monitoring to the latest version to mitigate this vulnerability and to restrict user permissions to the Take Action view.

Other vulnerabilities in IBM Tivoli Monitoring

CVE-2014-6141High
IBM Tivoli Monitoring (ITM) versions 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 through FP05, and 6.3.0 before FP04 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging Take Action view authority to modify in-progress commands.

Original NVD description (English source)

The portal in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands by leveraging Take Action view authority and providing crafted input.