Description (CNA)
IBM Tivoli Continuous Data Protection for Files (CDP) 3.1.0 uses weak permissions (unrestricted write) for the Central Admin Global download directory, which allows local users to place arbitrary files into a location used for updating CDP clients.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.vupen.com/english/advisories/2007/3683
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38215
- http://secunia.com/advisories/27473
- http://www.securityfocus.com/bid/26293
- http://www-1.ibm.com/support/docview.wss?uid=swg1IC54264
ADP enrichment
No English description supplied.