Auth bypass in Ibm Tivoli_provisioning_manager_os_deployment

CVE-2010-4121

The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read database records via a session on TCP port 20…

Vulnerability class: Broken Authentication

EPSS: 0.032 (86.8th percentile) — read the EPSS interpretation.

Affected products

Ibm Tivoli_provisioning_manager_os_deployment — versions 7.1.1.3
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)