CVE-2013-2974 Information

Description

The BIRT viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.x before 7.2.1.5 allows remote authenticated users to bypass authorization checks and obtain report-administration privileges and consequently create or delete reports or conduct SQL injection attacks via crafted parameters to the BIRT reporting URL.

Reference

http://www.ibm.com/support/docview.wss?uid=swg21662955 https://exchange.xforce.ibmcloud.com/vulnerabilities/83877