CVE-2000-1239

—

CVSS 2.0

9.0 high

EPSS

—

Published

Dec 31, 2000 (Dec 31, 2000)

Modified

Sep 23, 2026

Description

The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.

Vendors: ibm
Products: tivoli management framework
Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

NVD CVE.org GitHub PoCs EPSS (—)

In the news0 stories

No ingested article mentions this CVE yet.