CVE-2000-1239
Last modified
CVE-2000-1239 is a vulnerability of currently unknown severity. The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.. EPSS estimates a 2.08% chance of exploitation in the next 30 days.
Description
The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Tivoli Management Framework | 3.7.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2000-1239?
How severe is CVE-2000-1239?
How do I fix CVE-2000-1239?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2000
- CVE-2000-1233SQL injection vulnerability in read.php3 and other scripts i…
- CVE-2000-1234violation.php3 in Phorum 3.0.7 allows remote attackers to se…
- CVE-2000-1235The default configurations of (1) the port listener and (2) …
- CVE-2000-1236SQL injection vulnerability in mod_sql in Oracle Internet Ap…
- CVE-2000-1237The POP3 server in FTGate returns an -ERR code after receivi…
- CVE-2000-1238BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6…
- CVE-2000-1240Unspecified vulnerability in siteman.php3 in AnyPortal(php) …
- CVE-2000-1241Unspecified vulnerability in Haakon Nilsen simple, integrate…
- CVE-2000-1242The HTTP service in American Power Conversion (APC) PowerChu…
- CVE-2000-1243Privacy leak in Dansie Shopping Cart 3.04, and probably earl…
- CVE-2000-1244Computer Associates InoculateIT Agent for Exchange Server do…
- CVE-2000-1245Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.…
Are you affected by CVE-2000-1239?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST