CVE-2017-1182

EUVD-2017-10198
IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the system, when default client-server default communications, HTTP, are being used. IBM X-Force ID: 123493.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
ADJACENT_NETWORK
HIGH
NONE
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
Affected Products (NVD)
VendorProductVersion
ibmtivoli_monitoring
6.2.2.9
ibmtivoli_monitoring
6.2.3.5
ibmtivoli_monitoring
6.3.0.7
𝑥
= Vulnerable software versions
References
http://www.ibm.com/support/docview.wss?uid=swg22003402
http://www.securitytracker.com/id/1038913
https://exchange.xforce.ibmcloud.com/vulnerabilities/123493
http://www.ibm.com/support/docview.wss?uid=swg22003402
http://www.securitytracker.com/id/1038913
https://exchange.xforce.ibmcloud.com/vulnerabilities/123493