File Permission Bypass in IBM Tivoli Management Framework
CVE-2000-1239

Currently unrated

Key Information:

Vendor: IBM
Status: Tivoli Management Framework
Vendor: CVE Published:; 31 December 2000

What is CVE-2000-1239?

The Tivoli Lightweight Client Framework (LCF) within IBM Tivoli Management Framework 3.7.1 contains a vulnerability that enables remote authenticated users to bypass established file permissions on sensitive Tivoli Endpoint Configuration data files. This occurs due to the framework's initialization process, which sets the http_disable parameter to zero, inadvertently allowing access through unspecified log file manipulations. Proper steps should be taken to mitigate exposure and to ensure appropriate access controls are enforced.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch