CVE-2014-6141

Severity: high (CVSS 8.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-02-02 · updated 2026-06-17
Weakness: CWE-264

Description

IBM Tivoli Monitoring (ITM) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 through FP05, and 6.3.0 before FP04 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging Take Action view authority to modify in-progress commands.

Affected products

IBM Tivoli Monitoring: 6.2.0, 6.2.0.1, 6.2.0.2, 6.2.0.3, 6.2.1, 6.2.1.0 (+27)

References

http://www-01.ibm.com/support/docview.wss?uid=swg21690932
https://exchange.xforce.ibmcloud.com/vulnerabilities/96911
http://www-01.ibm.com/support/docview.wss?uid=swg21690932
https://exchange.xforce.ibmcloud.com/vulnerabilities/96911

Get alerted when CVE-2014-6141 or the next vulnerability affects your stack