CVE-2010-4121

HIGH 7.5CVE-2010-4121 · Published 28/10/2010 · updated 16/06/2026

In short

CVE-2010-4121 is a HIGH (CVSS 7.5) vulnerability affecting tivoli provisioning manager os deployment (ibm).
Chance of exploitation in the next 30 days (EPSS): 3.2%, higher than 88.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tivoli provisioning manager os deployment ibm	`= 7.1.1.3`	No fix yet

Description

The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read database records via a session on TCP port 2020. NOTE: the vendor disputes this issue, stating that the "default Microsoft Access database is not password protected because it is intended to be used for evaluation purposes only.

References

More vulnerabilities in tivoli provisioning manager os deployment

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free