CVE-2016-0214
HighSummary
IBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files. An attacker could exploit this vulnerability to upload a malicious file, which would only be executed through a phishing attack to trick an unsuspecting victim.
Risk Assessment
The organization is at risk of malware being executed by an unsuspecting victim, potentially leading to data loss or system compromise.
Recommendation
It is recommended to implement security measures such as user education on phishing and monitoring and restricting file upload capabilities by remote users.
Other vulnerabilities in IBM Tivoli Endpoint Manager
See all- CVE-2017-1227High
IBM Tivoli Endpoint Manager could allow an unauthorized user to consume all resources and crash the system.
- CVE-2017-1224High
IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
- CVE-2017-1218High
IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
- CVE-2016-0396High
IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands that would be executed with unnecessary higher privileges than expected.
Original NVD description (English source)
IBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files. A remote attacker could exploit this vulnerability to upload a malicious file. The only way that file would be executed would be through a phishing attack to trick an unsuspecting victim to execute the file.