Identifying The IBM Tivoli Manager Vulnerabilities

I am here once again, to bring you some news, with regards to a computer security vulnerability that has recently been reported. Yes, another new vulnerability has been brought to my attention, which I would like to bring to yours. The bad news is that this is not an individual vulnerability, but rather a couple of vulnerabilities. These vulnerabilities have been reported in the Tivoli Identity Manager.

First let's get down to me explaining what Tivoli Identity Manager is. It is basically an identity management system. It automates internal controls that govern your user access rights. It is geared to help manage things such as permissions, user accounts and passwords, effectively in an automated nature. You can even use it if you are using Windows 98. Some of the files of Windows 98 may include but are not limited to the following: _ISRES.DLL, 3dfx32vb.dll, a2560nt.sys, BACKFILL.EXE, c4dll.dll as well as d3drg24x.dll.

One vulnerability that has been discovered, relates to an error when input is passed to the self service interface, it is not correctly modified before it gets back to the users. This vulnerability runs the risk of being exploited in order to effectively execute arbitrary HTML code as well as script code in the administrators browsing session.

The next vulnerability is again related to input, but in a different context. This relates to input that is passed to the TIM console interface, it is not adequately modified before being returned to its users. This, once again, may be exploited in order to effectively execute arbitrary HTML code as well as script code in the administrators browsing session.

Another impact of these vulnerabilities may result in, amongst other things, cross site scripting attacks. These vulnerabilities have been rated as less critical, which means you can all breathe a sigh of relief. Although you may still want to know what the solution to these vulnerabilities are. The solution to the IBM Tivoli Manager vulnerabilities is to apply the Interim Fix 5.0.0.6-TIV-TIM-IF0028.