CVE-2014-6148

no score yetEPSS 1.0%

IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 through 7.2.1.6, and 7.2.2.0 through 7.2.2.2 does not require TADDM authentication for rptdesign downloads, which allows remote authenticated users to obtain sensitive database information via a crafted URL.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2014-10-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:tivoli_application_dependency_discovery_manager

References

http://secunia.com/advisories/61785
http://www-01.ibm.com/support/docview.wss?uid=swg21688549
http://www.securityfocus.com/bid/70842
https://exchange.xforce.ibmcloud.com/vulnerabilities/96918
http://secunia.com/advisories/61785

Check your stack JSON