PatchRadar

← Browse

CVE-2000-1239

Medium

Elevated severity or exploit probability.

CVSS base
9.0 HIGH
AV:N/AC:L/Au:S/C:C/I:C/A:C
EPSS — probability of exploitation (30 days)
2.1%
81.1th percentile
CISA KEV
Not listed
Weakness / dates
—
Published 2000-12-31 · modified 2026-09-23

Description

The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.

Affected

ibm

References

Official: NVD · CVE.org