2 lines
5.3 KiB
JSON
2 lines
5.3 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp21:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"Tivoli Monitoring","vendor":"IBM","versions":[{"lessThanOrEqual":"6.3.0.7 Service Pack 21","status":"affected","version":"6.3.0.7","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:-:*:*:*:*:*:*","matchCriteriaId":"15633ADC-6913-4AA1-8524-F139895B1C9D","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp1:*:*:*:*:*:*","matchCriteriaId":"F8F29F79-3813-4B6F-A0FE-3E12711F2827","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp10:*:*:*:*:*:*","matchCriteriaId":"63F43D7A-2BB8-475A-9F95-5AD83FC2F1E1","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp11:*:*:*:*:*:*","matchCriteriaId":"89FE6200-3F7A-43E6-B9DB-24D1B956A509","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp12:*:*:*:*:*:*","matchCriteriaId":"8632DB2C-4814-43F9-8AA9-682FB000CDC7","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp13:*:*:*:*:*:*","matchCriteriaId":"9D1B4834-85E5-4E41-9886-03BFD8424FF2","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp14:*:*:*:*:*:*","matchCriteriaId":"54AE7933-034F-459B-8C02-2850D3153437","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp15:*:*:*:*:*:*","matchCriteriaId":"643F4560-5049-466D-B4BA-18DDBBD2BEB2","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp16:*:*:*:*:*:*","matchCriteriaId":"3698F091-E08C-4B5C-9E85-1729A19A914F","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp17:*:*:*:*:*:*","matchCriteriaId":"DA218FEA-1091-4098-8A4C-3557924A27EE","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp18:*:*:*:*:*:*","matchCriteriaId":"6993220C-C737-4876-8E52-1C0CB9F109A5","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp19:*:*:*:*:*:*","matchCriteriaId":"2AAFF1A2-750F-4C08-B544-0D6BC56D2048","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp2:*:*:*:*:*:*","matchCriteriaId":"056BA0BC-CA53-4103-AA0A-692226602765","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp20:*:*:*:*:*:*","matchCriteriaId":"68430D8F-B043-4179-860E-D4DADB7203E1","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp21:*:*:*:*:*:*","matchCriteriaId":"B9984364-3AFB-4E06-97B0-53B7D5657882","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp3:*:*:*:*:*:*","matchCriteriaId":"FC469C26-0D30-40CF-8A24-AC7940DD9D44","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp4:*:*:*:*:*:*","matchCriteriaId":"2E6529C0-2017-413A-9FF8-D3D09475E867","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp5:*:*:*:*:*:*","matchCriteriaId":"BF411C3F-AB57-4F4B-92C7-6F6C142F2F64","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp6:*:*:*:*:*:*","matchCriteriaId":"C6BC45D1-9BE9-44FC-A99A-FF99F7393274","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp7:*:*:*:*:*:*","matchCriteriaId":"53D77364-F817-4BE8-BF25-1537180B06DE","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp8:*:*:*:*:*:*","matchCriteriaId":"680F331C-D4C7-4280-9981-9848BAE460C4","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:sp9:*:*:*:*:*:*","matchCriteriaId":"3C280072-A982-4A9F-A740-00838B72259B","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system."},{"lang":"es","value":"IBM Tivoli Monitoring 6.3.0.7 hasta 6.3.0.7 Paquete de Servicio 21 podría permitir a un atacante remoto recorrer directorios en el sistema. Un atacante podría enviar una solicitud URL especialmente diseñada que contenga secuencias 'punto punto' (/../) para ver archivos arbitrarios en el sistema."}],"id":"CVE-2025-3355","lastModified":"2026-10-07T21:10:00.200","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"psirt@us.ibm.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-3355","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-10-30T19:49:59.308067Z","version":"2.0.3"}}]},"published":"2025-10-30T20:15:38.673","references":[{"source":"psirt@us.ibm.com","tags":["Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/7249694"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}
|