CVE-2014-6148
N/A
N/A
Summary
IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 through 7.2.1.6, and 7.2.2.0 through 7.2.2.2 does not require TADDM authentication for rptdesign downloads, which allows remote authenticated users to obtain sensitive database information via a crafted URL.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www-01.ibm.com/support/docview.wss?uid=swg21688549
- http://secunia.com/advisories/61785
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96918
- http://www.securityfocus.com/bid/70842
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21688549
- http://secunia.com/advisories/61785
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96918
- http://www.securityfocus.com/bid/70842
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.