PT-2015-5525 · Ibm · Ibm Tivoli Security Directory Server

Publicado 2015-06-28 · Atualizado 2016-12-30 · CVE-2015-1974

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Tivoli Security Directory Server versions 6.0 through 6.0 before iFix 75 IBM Tivoli Security Directory Server versions 6.1 through 6.1 before iFix 68 IBM Tivoli Security Directory Server versions 6.2 through 6.2 before iFix 44 IBM Tivoli Security Directory Server versions 6.3 through 6.3 before iFix 37 IBM Tivoli Security Directory Server versions 6.3.1 through 6.3.1 before iFix 11 IBM Tivoli Security Directory Server versions 6.4 through 6.4 before iFix 2

Description The web administration tool in IBM Tivoli Security Directory Server allows remote authenticated users to bypass intended command restrictions.

Recommendations Apply iFix 75 for version 6.0 Apply iFix 68 for version 6.1 Apply iFix 44 for version 6.2 Apply iFix 37 for version 6.3 Apply iFix 11 for version 6.3.1 Apply iFix 2 for version 6.4

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-1974

Produtos afetados

Ibm Tivoli Security Directory Server

Referências · 4

• http://securityfocus.com/bid/75438 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1974 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21960659 · Aviso do Fabricante
• http://securitytracker.com/id/1032734 · Nota