IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitoring, caused by the default console connection not being encrypted. IBM X-Force ID: 123487.
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
Link | Tags |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/123487 | vdb entry vendor advisory |
http://www.ibm.com/support/docview.wss?uid=swg22003402 | vendor advisory |
http://www.securityfocus.com/bid/99596 | vdb entry third party advisory |
http://www.securitytracker.com/id/1038913 | vdb entry third party advisory |