CyberRota Analysis
AI analysis pending.
CVE
CVE-2000-1239
Severity
HIGH
CVSS
9
EPSS
2.08%
Original NVD Description
The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.