CVE-2017-1182

HIGH

IBM Tivoli Monitoring Portal v6 HTTP Arbitrary Command Execution Vulnerability

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2017-1182 has a selected CVSS score of 7.5 (high); EIP currently links 1 repository PoC.

Description

IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the system, when default client-server default communications, HTTP, are being used. IBM X-Force ID: 123493.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jan 21, 2021 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Repository PoCs
1

Affected products and versions

2
ProductSourceVersion range

Tivoli Monitoring V6

Browse IBM / Tivoli Monitoring V6
CVE List6.2.3.5affected
6.2.2.9affected
6.3.0.7affected

tivoli_monitoring

Browse IBM / tivoli_monitoring
VulnCheckVersion data not supplied

Proofs of concept

1

Repository PoCs

GitHubMorfeen01/cve-2017-1182-TNRepository PoCby Morfeen010Not analyzed3 files

26.9 KiB

GitHub
PoC details

References

4