CVE-2017-1181

EUVD-2017-10197
IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitoring, caused by the default console connection not being encrypted. IBM X-Force ID: 123487.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7 HIGH
LOCAL
HIGH
LOW
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 8%
Affected Products (NVD)
VendorProductVersion
ibmtivoli_monitoring
6.2.2.9
ibmtivoli_monitoring
6.2.3.5
ibmtivoli_monitoring
6.3.0.7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.ibm.com/support/docview.wss?uid=swg22003402
http://www.securityfocus.com/bid/99596
http://www.securitytracker.com/id/1038913
https://exchange.xforce.ibmcloud.com/vulnerabilities/123487
http://www.ibm.com/support/docview.wss?uid=swg22003402
http://www.securityfocus.com/bid/99596
http://www.securitytracker.com/id/1038913
https://exchange.xforce.ibmcloud.com/vulnerabilities/123487