CVE:CVE-2000-1239
CNNVD:CNNVD-200012-208
IBM Tivoli Management Framework 3.7.1版本中Tivoli Lightweight Client Framework (LCF)的HTTP界面在安装的时候设置http_disable为零，远程验证用户可以借助记录文件的未明操作绕过Tivoli Endpoint Configuration数据文件上的文件权限。
solution:Upgrade ibm tivoli_management_framework to a higher version than 3.7.1,and avoid the version 3.7.1