CVE-2016-8926

MEDIUM

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 - Unauthorized Data Access

Title source: llm

Description

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to read system files or data that is restricted to authorized users. IBM X-Force ID: 118539.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=swg22001579&myns=swgtiv&mynp=OCSSPLFC&mync=E&cm_sp=swgtiv-_-OCSSPLFC-_-E

Scores

CVSS v3 4.3

EPSS 0.0015

EPSS Percentile 35.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (18)

ibm/tivoli_application_dependency_discovery_manager 7.2.2

ibm/tivoli_application_dependency_discovery_manager 7.2.2.0

ibm/tivoli_application_dependency_discovery_manager 7.2.2.1

ibm/tivoli_application_dependency_discovery_manager 7.2.2.2

ibm/tivoli_application_dependency_discovery_manager 7.2.2.3

ibm/tivoli_application_dependency_discovery_manager 7.2.2.4

ibm/tivoli_application_dependency_discovery_manager 7.2.2.5

ibm/tivoli_application_dependency_discovery_manager 7.3.0

ibm/tivoli_application_dependency_discovery_manager 7.3.0.0

ibm/tivoli_application_dependency_discovery_manager 7.3.0.1

... and 8 more

Published Apr 14, 2017

Tracked Since Feb 18, 2026