IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory (AD) LDAP authentication, allows remote attackers to obtain login access via unspecified vectors without entering a password.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ04768 | vendor advisory |
http://osvdb.org/43718 | vdb entry |
http://www-1.ibm.com/support/docview.wss?uid=swg24017385 |