First published: Sun Dec 31 2000(Updated: )
The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Tivoli Management Framework | =3.7.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-1239 is classified as a moderately severe vulnerability.
To mitigate CVE-2000-1239, user privileges should be reviewed and restricted on Tivoli Endpoint Configuration data files.
CVE-2000-1239 affects users utilizing IBM Tivoli Management Framework version 3.7.1.
CVE-2000-1239 can be exploited by remote authenticated users to bypass file permissions.
The implications of CVE-2000-1239 include potential unauthorized access to sensitive configuration data.