CVE-2013-4040

MEDIUM

IBM Tivoli Application Dependency Discovery Manager <7.2.1.5/7.2.0 ...

Title source: llm
STIX 2.1

Description

IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2.x before 7.2.1.5 and 7.2.x before 7.2.2.0 on Unix use weak permissions (755) for unspecified configuration and log files, which allows local users to obtain sensitive information by reading the files. IBM X-Force ID: 86176.

References (2)

Core 2
Core References
Mitigation, Patch, Vendor Advisory x_refsource_confirm
https://www-01.ibm.com/support/docview.wss?uid=swg21672253
VDB Entry, Vendor Advisory vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/86176

Scores

CVSS v3 5.5
EPSS 0.0035
EPSS Percentile 27.3%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-275
Status published
Products (2)
ibm/tivoli_application_dependency_discovery_manager 7.1.2
ibm/tivoli_application_dependency_discovery_manager 7.2.0.0 - 7.2.1.4
Published May 01, 2018
Tracked Since Feb 18, 2026