CVE-2000-1239: IBM Tivoli Management Framework

High severity, CVSS 9.0. EPSS: 2.1% chance of exploitation in the next 30 days.

The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.

Affected products

• IBM Tivoli Management Framework: version 3.7.1 only

Published 2000-12-31. Last modified 2026-09-23.