CVE-2000-1239

Published: Dec 31, 2000Modified: Apr 16, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.

Affected (1)

Products: Ibm: Tivoli Management Framework

1 product

Tivoli Management Framework

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Management Framework	Version 3.7.1

References (6)

http://www-1.ibm.com/support/docview.wss?uid=swg21082896

Source: cve@mitre.org

http://www.securityfocus.com/bid/17085

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/3927

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=swg21082896

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17085

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/3927

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.