VulnerabilityModified
CVE-2007-5819
IBM Tivoli Continuous Data Protection for Files (CDP) 3.1.0 uses weak permissions (unrestricted write) for the Central Admin Global download directory, which allows local users to place arbitrary files into a location used for updating CDP clients.
LOW 2.1EPSS 0.31%
Does this matter?
Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.
Description
IBM Tivoli Continuous Data Protection for Files (CDP) 3.1.0 uses weak permissions (unrestricted write) for the Central Admin Global download directory, which allows local users to place arbitrary files into a location used for updating CDP clients.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 0.31% probability · 23th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- ibm/tivoli continuous data protection for files
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/27473Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1IC54264
- http://www.securityfocus.com/bid/26293
- http://www.vupen.com/english/advisories/2007/3683
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38215
- http://secunia.com/advisories/27473Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1IC54264
- http://www.securityfocus.com/bid/26293
- http://www.vupen.com/english/advisories/2007/3683
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38215
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.