Tivoli Application Dependency Discovery Manager CVE-2014-6148 Information Disclosure Vulnerability

Bugtraq ID:	70842
Class:	Input Validation Error
CVE:	CVE-2014-6148
Remote:	Yes
Local:	No
Published:	Oct 29 2014 12:00AM
Updated:	Oct 29 2014 12:00AM
Credit:	Lukasz Plonka
Vulnerable:	IBM Tivoli Application Dependency Discovery Manager 7.2.2 IBM Tivoli Application Dependency Discovery Manager 7.2.1 3 IBM Tivoli Application Dependency Discovery Manager 7.2.1 2 IBM Tivoli Application Dependency Discovery Manager 7.2.1 1 IBM Tivoli Application Dependency Discovery Manager 7.2.1 IBM Tivoli Application Dependency Discovery Manager 7.2.2.2 IBM Tivoli Application Dependency Discovery Manager 7.2.2.1 IBM Tivoli Application Dependency Discovery Manager 7.2.1.6 IBM Tivoli Application Dependency Discovery Manager 7.2.1.5 IBM Tivoli Application Dependency Discovery Manager 7.2.1.4 IBM Tivoli Application Dependency Discovery Manager 7.2.0.9 IBM Tivoli Application Dependency Discovery Manager 7.2.0.8 IBM Tivoli Application Dependency Discovery Manager 7.2.0.7 IBM Tivoli Application Dependency Discovery Manager 7.2.0.6 IBM Tivoli Application Dependency Discovery Manager 7.2.0.5 IBM Tivoli Application Dependency Discovery Manager 7.2.0.4 IBM Tivoli Application Dependency Discovery Manager 7.2.0.3 IBM Tivoli Application Dependency Discovery Manager 7.2.0.2 IBM Tivoli Application Dependency Discovery Manager 7.2.0.10 IBM Tivoli Application Dependency Discovery Manager 7.2.0.1 IBM Tivoli Application Dependency Discovery Manager 7.2.0
Not Vulnerable:

Tivoli Application Dependency Discovery Manager CVE-2014-6148 Information Disclosure Vulnerability

IBM Tivoli Application Dependency Discovery Manager is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to disclose sensitive information. Information obtained may lead to further attacks.

Tivoli Application Dependency Discovery Manager CVE-2014-6148 Information Disclosure Vulnerability

Attackers can use a browser to exploit this issue.

Tivoli Application Dependency Discovery Manager CVE-2014-6148 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Tivoli Application Dependency Discovery Manager CVE-2014-6148 Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• Tivoli Application Dependency Discovery Manager Home Page (IBM)
  
• Security Bulletin: IBM Tivoli Application Dependency Discovery Manager (TADDM) c (IBM)