IBM Security Bulletin: IBM Tivoli Monitoring Soap Server (CVE-2016-6083)

The default configuration for IBM Tivoli Monitoring soap interface allows unathenticated users access to soap requests.

CVE(s): CVE-2016-6083

Affected product(s) and affected version(s):

IBM Tivoli Monitoring SOAP (KSH component) versions 6.2.2 through 6.2.2 Fix Pack 9, 6.2.3 through 6.2.3 Fix Pack 5 and 6.3.0 through 6.3.0 Fix Pack 7

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2t2qoAt
X-Force Database: http://ift.tt/2tC5gxO

The post IBM Security Bulletin: IBM Tivoli Monitoring Soap Server (CVE-2016-6083) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2t2hQJy