CVEvulnerability
CVE-2015-1974
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-06-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote authenticated users to bypass intended command restrictions via unspecified vectors.
Affected configurations
• ibm tivoli directory server 6.0
• ibm tivoli directory server 6.1.0
• ibm tivoli directory server 6.2.0.0
• ibm tivoli directory server 6.3.0.0
• ibm tivoli directory server 6.3.1.0
• ibm tivoli directory server 6.4.0
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21960659 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/75438 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032734 Third Party Advisory, VDB Entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21960659 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/75438 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032734 Third Party Advisory, VDB Entry