CVE-2017-1183

High

Published: 17/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to modify SQL commands to the Portal Server, when default client-server communications, HTTP, are being used.

Risk Assessment

An attacker could alter database commands, potentially leading to unauthorized access or modification of data.

Recommendation

It is recommended to secure client-server communication, for example by using encryption or changing default communication settings.

Other vulnerabilities in IBM Tivoli Monitoring Portal v6

CVE-2017-1182High
IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the system, when default client-server communications, HTTP, are being used.

Original NVD description (English source)

IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to modify SQL commands to the Portal Server, when default client-server communications, HTTP, are being used. IBM X-Force ID: 123494.