CVE-2013-4040

MEDIUM 5.5CVE-2013-4040 · Published 01/05/2018 · updated 16/06/2026

In short

CVE-2013-4040 is a MEDIUM (CVSS 5.5) vulnerability affecting tivoli application dependency discovery manager (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tivoli application dependency discovery manager ibm	`= 7.1.2≥ 7.2.0.0, ≤ 7.2.1.4`	No fix yet

Description

IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2.x before 7.2.1.5 and 7.2.x before 7.2.2.0 on Unix use weak permissions (755) for unspecified configuration and log files, which allows local users to obtain sensitive information by reading the files. IBM X-Force ID: 86176.

References

exchange.xforce.ibmcloud.com/vulnerabilities/86176 · VDB Entry
www-01.ibm.com/support/docview.wss · Mitigation

More vulnerabilities in tivoli application dependency discovery manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tivoli application dependency discovery manager

ibm

= 7.1.2≥ 7.2.0.0, ≤ 7.2.1.4

No fix yet

More vulnerabilities in tivoli application dependency discovery manager

See all →