CVE-2011-4668 IBM Tivoli Netcool/Reporter 2.2 before 2.2.0.8 allows remote attackers to execute arbitrary code via vectors related to an unspecified CGI program used with the Apache HTTP Server.
HighCVSS 7.5
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Tivoli Netcool/Reporter 2.2 before 2.2.0.8 allows remote attackers to execute arbitrary code via vectors related to an unspecified CGI program used with the Apache HTTP Server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm tivoli netcoolreporter | = 2.2.0-tiv-ncreporter-if0001 | No fix listed |
| ibm tivoli netcoolreporter | = 2.2.0-tiv-ncreporter-if0002 | No fix listed |
| ibm tivoli netcoolreporter | = 2.2.0.1 | No fix listed |
| ibm tivoli netcoolreporter | = 2.2.0.2 | No fix listed |
| ibm tivoli netcoolreporter | = 2.2.0.3 | No fix listed |
| ibm tivoli netcoolreporter | = 2.2.0.4 | No fix listed |
| ibm tivoli netcoolreporter | = 2.2.0.5 | No fix listed |
| ibm tivoli netcoolreporter | = 2.2.0.6 | No fix listed |
| ibm tivoli netcoolreporter | = 2.2.0.7 | No fix listed |
References
- 77402 vdb-entry
- 46999 third-party-advisory
- www-01.ibm.com
- IZ94277 vendor-advisory
- 50864 vdb-entry
- tivnetcoolreporter-script-cmd-execution(71663) vdb-entry