CVE-2011-2330

IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, 4.3.1 - Unauthenticated Access via Built-in Account

Title source: llm
STIX 2.1

Description

Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 has an unspecified "built-in account" that is "trivially" accessed, which makes it easier for remote attackers to send requests to restricted pages via a session on TCP port 9495, a different vulnerability than CVE-2011-1220.

References (5)

Core 5
Core References
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8268
Third Party Advisory x_refsource_misc
http://zerodayinitiative.com/advisories/ZDI-11-169/
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/518199/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/67858

Scores

EPSS 0.0182
EPSS Percentile 76.5%

Details

CWE
CWE-264
Status published
Products (4)
ibm/tivoli_management_framework 3.7.1
ibm/tivoli_management_framework 4.1
ibm/tivoli_management_framework 4.1.1
ibm/tivoli_management_framework 4.3.1
Published Jun 02, 2011
Tracked Since Feb 18, 2026