CVEvulnerability

CVE-2015-1977

7.5 HIGH Published 2016-07-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-07-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server (ISDS) before 6.3.1.18-ISS-ISDS-IF0018 and 6.4.x before 6.4.0.9-ISS-ISDS-IF0009 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.

Affected configurations

• ibm tivoli directory server 6.2.0 • ibm tivoli directory server 6.2.0.0 • ibm tivoli directory server 6.2.0.1 • ibm tivoli directory server 6.2.0.2 • ibm tivoli directory server 6.2.0.3 • ibm tivoli directory server 6.2.0.4 • ibm tivoli directory server 6.2.0.5 • ibm tivoli directory server 6.2.0.6 • ibm tivoli directory server 6.2.0.7 • ibm tivoli directory server 6.2.0.8 • ibm tivoli directory server 6.2.0.10 • ibm tivoli directory server 6.2.0.11 • ibm tivoli directory server 6.2.0.12 • ibm tivoli directory server 6.2.0.13 • ibm tivoli directory server 6.2.0.14 • ibm tivoli directory server 6.2.0.15 • ibm tivoli directory server 6.2.0.19 • ibm tivoli directory server 6.2.0.20 • ibm tivoli directory server 6.2.0.21 • ibm tivoli directory server 6.2.0.22 • ibm tivoli directory server 6.2.0.23 • ibm tivoli directory server 6.2.0.24 • ibm tivoli directory server 6.2.0.25 • ibm tivoli directory server 6.2.0.26 • ibm tivoli directory server 6.2.0.27 • ibm tivoli directory server 6.2.0.29 • ibm tivoli directory server 6.2.0.30 • ibm tivoli directory server 6.2.0.31 • ibm tivoli directory server 6.2.0.32 • ibm tivoli directory server 6.2.0.33 • ibm tivoli directory server 6.2.0.34 • ibm tivoli directory server 6.2.0.35 • ibm tivoli directory server 6.2.0.36 • ibm tivoli directory server 6.2.0.37 • ibm tivoli directory server 6.2.0.38 • ibm tivoli directory server 6.2.0.39 • ibm tivoli directory server 6.2.0.40 • ibm tivoli directory server 6.2.0.41 • ibm tivoli directory server 6.2.0.42 • ibm tivoli directory server 6.2.0.43 • ibm tivoli directory server 6.2.0.44 • ibm tivoli directory server 6.2.0.45 • ibm tivoli directory server 6.2.0.46 • ibm tivoli directory server 6.2.0.47 • ibm tivoli directory server 6.2.0.48 • ibm tivoli directory server 6.2.0.49 • ibm tivoli directory server 6.3.0 • ibm tivoli directory server 6.3.0.0 • ibm tivoli directory server 6.3.0.1 • ibm tivoli directory server 6.3.0.2 • ibm tivoli directory server 6.3.0.8 • ibm tivoli directory server 6.3.0.9 • ibm tivoli directory server 6.3.0.10 • ibm tivoli directory server 6.3.0.11 • ibm tivoli directory server 6.3.0.12 • ibm tivoli directory server 6.3.0.14 • ibm tivoli directory server 6.3.0.15 • ibm tivoli directory server 6.3.0.17 • ibm tivoli directory server 6.3.0.18 • ibm tivoli directory server 6.3.0.19 … and 131 more

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References