Description
IBM Tivoli Continuous Data Protection for Files (CDP) 3.1.0 uses weak permissions (unrestricted write) for the Central Admin Global download directory, which allows local users to place arbitrary files into a location used for updating CDP clients.
References (5)
Core 5
Core References
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3683
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38215
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27473
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/26293
Various Sources vendor-advisory
x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg1IC54264
Scores
EPSS
0.0031
EPSS Percentile
23.0%
Details
CWE
CWE-264
Status
published
Products (1)
ibm/tivoli_continuous_data_protection_for_files
3.1.0
Published
Nov 05, 2007
Tracked Since
Feb 18, 2026