CVE-2010-4121

The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote…

published October 28, 2010

CVSS
—
EPSS
3%
Percentile
87.9
In the wild
Unconfirmed
What it is

The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read database records via a session on TCP port 2020. NOTE: the vendor disputes this issue, stating that the "default Microsoft Access database is not password protected because it is intended to be used for evaluation purposes only.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03160 · 87.9th percentile
Published
2010-10-28T20:00Z
EPSS history
Timeline
  • 28 OCT 20:00Z
    The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote…
    cvelistv5