CVE-2014-6148

Published: Oct 31, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 through 7.2.1.6, and 7.2.2.0 through 7.2.2.2 does not require TADDM authentication for rptdesign downloads, which allows remote authenticated users to obtain sensitive database information via a crafted URL.

Affected (21)

Products: Ibm: Tivoli Application Dependency Discovery Manager

Ibm

1 product

Tivoli Application Dependency Discovery Manager

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.0.0
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.0.10
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.0.1
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.0.2
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.0.3
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.0.4
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.0.5
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.0.6
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.0.7
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.0.8
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.0.9
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.1.1
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.1.2
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.1.3
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.1.4
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.1.5
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.1.6
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.1
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.2.1
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.2.2
Ibm Tivoli Application Dependency Discovery Manager	Version 7.2.2