CVE-2023-47142 HIGH

CVE-2023-47142: IBM Tivoli Application Dependency Discovery Manager privilege escalation

Vendor Ibm
Product Tivoli Application Dependency Discovery Manager
Weakness CWE-863 · Incorrect authorization
Published February 2, 2024
Last update September 20, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 could allow an attacker on the organization's local network to escalate their privileges due to unauthorized API access. IBM X-Force ID: 270267.

Key dates

02Disclosure timeline

February 2, 2024 CVE published
September 20, 2024 Record updated