A security issue has been reported in IBM Tivoli Provisioning Manager, which potentially can be exploited by malicious users to bypass certain security restrictions.

The security issue is caused due to an error in the SOAP authentication mechanism. This can potentially be exploited by an LDAP user to run SOAP commands when LDAP is used for authentication and is shared with other applications.

The security issue is reported in version 5.1.0.2, 5.1.1, and 5.1.1.1.

Solution
Update to version 5.1.1.1 and apply Interim Fix IF0006.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21330228

Deep Links
Links available to Secunia VIM customers