CVE-2016-5933

Published: Mar 8, 2017Modified: May 13, 2026

4.6

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Exploitability: 2.1 / Impact: 2.5

Source: NVD

Description

IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference #: 1997223.

Affected (23)

Products: Ibm: Tivoli Monitoring

Ibm

1 product

Tivoli Monitoring

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Monitoring	Version 6.2.2.2
Ibm Tivoli Monitoring	Version 6.2.2.3
Ibm Tivoli Monitoring	Version 6.2.2.4
Ibm Tivoli Monitoring	Version 6.2.2.5
Ibm Tivoli Monitoring	Version 6.2.2.6
Ibm Tivoli Monitoring	Version 6.2.2.7
Ibm Tivoli Monitoring	Version 6.2.2.8
Ibm Tivoli Monitoring	Version 6.2.2.9
Ibm Tivoli Monitoring	Version 6.2.2
Ibm Tivoli Monitoring	Version 6.2.3.1
Ibm Tivoli Monitoring	Version 6.2.3.2
Ibm Tivoli Monitoring	Version 6.2.3.3
Ibm Tivoli Monitoring	Version 6.2.3.4
Ibm Tivoli Monitoring	Version 6.2.3.5
Ibm Tivoli Monitoring	Version 6.2.3
Ibm Tivoli Monitoring	Version 6.3.0.1
Ibm Tivoli Monitoring	Version 6.3.0.2
Ibm Tivoli Monitoring	Version 6.3.0.3
Ibm Tivoli Monitoring	Version 6.3.0.4
Ibm Tivoli Monitoring	Version 6.3.0.5
Ibm Tivoli Monitoring	Version 6.3.0.6
Ibm Tivoli Monitoring	Version 6.3.0.7
Ibm Tivoli Monitoring	Version 6.3.0

Related CWEs

CWE-254

References (2)

http://www.ibm.com/support/docview.wss?uid=swg21997223

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg21997223

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.