CVE-2014-3051

Published: Oct 29, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The Internet Service Monitor (ISM) agent in IBM Tivoli Composite Application Manager (ITCAM) for Transactions 7.1 and 7.2 before 7.2.0.3 IF28, 7.3 before 7.3.0.1 IF30, and 7.4 before 7.4.0.0 IF18 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain credential information via a crafted certificate.

Affected (9)

Products: Ibm: Tivoli Composite Application Manager For Transactions

Ibm

1 product

Tivoli Composite Application Manager For Transactions

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Composite Application Manager For Transactions	Version 7.1.0.0
Ibm Tivoli Composite Application Manager For Transactions	Version 7.1.0.1
Ibm Tivoli Composite Application Manager For Transactions	Version 7.1.0.2
Ibm Tivoli Composite Application Manager For Transactions	Version 7.1.0.3
Ibm Tivoli Composite Application Manager For Transactions	Version 7.1.0.4
Ibm Tivoli Composite Application Manager For Transactions	Version 7.2.0.0
Ibm Tivoli Composite Application Manager For Transactions	Version 7.2.0.1
Ibm Tivoli Composite Application Manager For Transactions	Version 7.2.0.2
Ibm Tivoli Composite Application Manager For Transactions	Version 7.3.0.0