CVE-2017-1182

High

Published: 17/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the system, when default client-server communications, HTTP, are being used.

Risk Assessment

An attacker could gain full control over the system, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to update IBM Tivoli Monitoring Portal to the latest version and configure more secure communication methods instead of the default HTTP.

Other vulnerabilities in IBM Tivoli Monitoring Portal v6

CVE-2017-1183High
IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to modify SQL commands to the Portal Server, when default client-server communications, HTTP, are being used.

Original NVD description (English source)

IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the system, when default client-server default communications, HTTP, are being used. IBM X-Force ID: 123493.