IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 could allow an attacker on the organization's local network to escalate their privileges due to unauthorized API access. IBM X-Force ID: 270267.
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Link | Tags |
---|---|
https://www.ibm.com/support/pages/node/7105139 | patch vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/270267 | vdb entry vendor advisory |