CVE-2013-2974
The BIRT viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.x before 7.2.1.5 allows remote authenticated users to bypass authorization checks and obtain report-administration privileges, and consequently create or delete reports or conduct SQL injection attacks, via crafted parameters to the BIRT reporting URL.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - psirt@us.ibm.com
- Published
- 2014-01-29
- Last modified
- 2024-08-06
- Weaknesses
- CWE-264
Affected products
References
- http://www.ibm.com/support/docview.wss?uid=swg21662955
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83877
