Total vulnerabilities in the database
The BIRT viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.x before 7.2.1.5 allows remote authenticated users to bypass authorization checks and obtain report-administration privileges, and consequently create or delete reports or conduct SQL injection attacks, via crafted parameters to the BIRT reporting URL.
| Software | From | Fixed in |
|---|---|---|
| ibm / tivoli_application_dependency_discovery_manager | 7.2.1.2 | 7.2.1.2.x |
| ibm / tivoli_application_dependency_discovery_manager | 7.2.1.3 | 7.2.1.3.x |
| ibm / tivoli_application_dependency_discovery_manager | 7.2.1.1 | 7.2.1.1.x |
| ibm / tivoli_application_dependency_discovery_manager | 7.2.1.4 | 7.2.1.4.x |