CVE-2000-1239 The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass fi...
HighCVSS 9.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm tivoli management framework | = 3.7.1 | No fix listed |
References
- tivoli-lcf-file-read(3927) vdb-entry
- 17085 vdb-entry
- www-1.ibm.com