IBM Security Bulletin: IBM Tivoli Monitoring Soap Server (CVE-2016-6083)
The default configuration for IBM Tivoli Monitoring soap interface allows unathenticated users access to soap requests.
CVE(s): CVE-2016-6083
Affected product(s) and affected version(s):
IBM Tivoli Monitoring SOAP (KSH component) versions 6.2.2 through 6.2.2 Fix Pack 9, 6.2.3 through 6.2.3 Fix Pack 5 and 6.3.0 through 6.3.0 Fix Pack 7
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2t2qoAt
X-Force Database: http://ift.tt/2tC5gxO
The post IBM Security Bulletin: IBM Tivoli Monitoring Soap Server (CVE-2016-6083) appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team http://ift.tt/2t2hQJy