Feb 12, 2020 7:00 pm EST
Categorized: Medium Severity
Share this post:
Fixes a vulnerability reported in the libexpat parser that is used by IBM Tivoli Monitoring for parsing various configuration xml files as well as parsing soap requests.
Affected product(s) and affected version(s):
The basic services module, kbb for IBM Tivoli Monitoring is affected and is included in the TEMA(ax/gl), TEMS(ms), TEPS(cq) and the User Interface Extensions(ue) components.
For the various configuration xml files used by ITM, if they were to be manipulated with malicious intent by someone with access to your ITM installation, then you could be vulnerable to the CVE reported in this bulletin. Configuration files include those for the firewall gateway as well as private situations and audit logging.
For soap server enabling soap security also reduces the risk to just malicious users with ITM access.
| Affected Product(s) | Version(s) |
| IBM Tivoli Monitoring | 6.3.0 – 6.3.0.7 (up to 6.3.0.7 Service pack 2) |
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www.ibm.com/support/pages/node/2281731
from IBM Product Security Incident Response Team https://ift.tt/38oGkOr
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.