CVE-2011-2330

Currently unrated

Key Information:

Vendor
IBM
Status
Tivoli Management Framework
Vendor
CVE Published:
2 June 2011

Summary

Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 has an unspecified "built-in account" that is "trivially" accessed, which makes it easier for remote attackers to send requests to restricted pages via a session on TCP port 9495, a different vulnerability than CVE-2011-1220.

References

http://securityreason.com/securityalert/8268
third-party-advisoryx_refsource_SREASON
http://www-01.ibm.com/support/docview.wss?uid=swg21499146
x_refsource_MISC
http://zerodayinitiative.com/advisories/ZDI-11-169/
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.