IBM Tivoli Netcool System Service Monitor Multiple Vulnerabilities
Description
IBM has acknowledged a security issue and multiple vulnerabilities in IBM Tivoli Netcool System Service Monitor, which can be exploited by malicious people to conduct HTTP header injection attacks and bypass certain security restrictions.
For more information:
SA61925
SA63171
(#1, #2, #9, #10)
The security issue and vulnerabilities are reported in versions 4.0.0 FP1 through FP14 and Interim Fix 14-01 through Interim Fix 14-04 and 4.0.1 FP1 through FP2.
Vulnerable Products
Vulnerable Software: IBM Tivoli Netcool System Service Monitor 4.xIBM Tivoli Netcool/System Service Monitor 4.x
