Skip to content
OpenAdvisories
High WID-SEC-2025-2458 2 CVEs

IBM Tivoli Monitoring: Mehrere Schwachstellen

Published Oct 30, 2025 · Updated Oct 30, 2025 · de-DE

Vendor: IBM Product: Tivoli Monitoring Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Tivoli Monitoring ausnutzen, um Informationen offenzulegen oder Dateien zu manipulieren.

Product

Tivoli Monitoring ist eine Systemüberwachungs-Software zum Managen von Betriebssystemen, Datenbanken und Servern in verteilten und Host-Umgebungen.

Vulnerabilities 2

  • High 8.6
    CVE-2025-3356

    IBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operations

    IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view, overwrite, or append to ar…

    IBM Tivoli Monitoring
  • High 7.5
    CVE-2025-3355

    IBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operations

    IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the syst…

    IBM Tivoli Monitoring

Revision history

  1. #1

    Initiale Fassung

References