Lucene search
IbmCVE-2015-1972HistoryJun 28, 2015 - 3:59 p.m.
CVE-2015-1972
2015-06-2815:59:01
CWE-200
ibm
web.nvd.nist.gov
24
cve-2015-1972
ibm tivoli
security directory server
nvd
remote attackers
sensitive information
post request
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
7.1
Confidence
High
EPSS
0.002
Percentile
52.6%
IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to obtain sensitive error-log information via a crafted POST request.
Affected configurations
Node
ibmtivoli_directory_serverMatch6.0
ORibmtivoli_directory_serverMatch6.1.0
ORibmtivoli_directory_serverMatch6.2.0.0
ORibmtivoli_directory_serverMatch6.3.0.0
ORibmtivoli_directory_serverMatch6.3.1.0
ORibmtivoli_directory_serverMatch6.4.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | tivoli_directory_server | 6.0 | cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:* |
| ibm | tivoli_directory_server | 6.1.0 | cpe:2.3:a:ibm:tivoli_directory_server:6.1.0:*:*:*:*:*:*:* |
| ibm | tivoli_directory_server | 6.2.0.0 | cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.0:*:*:*:*:*:*:* |
| ibm | tivoli_directory_server | 6.3.0.0 | cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.0:*:*:*:*:*:*:* |
| ibm | tivoli_directory_server | 6.3.1.0 | cpe:2.3:a:ibm:tivoli_directory_server:6.3.1.0:*:*:*:*:*:*:* |
| ibm | tivoli_directory_server | 6.4.0 | cpe:2.3:a:ibm:tivoli_directory_server:6.4.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2015-1972
2015-06-28 15:59:01
cvelist
cvelist
CVE-2015-1972
2015-06-28 15:00:00
prion
prion
Cross site request forgery (csrf)
2015-06-28 15:59:00
ibm
ibm
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
7.1
Confidence
High
EPSS
0.002
Percentile
52.6%
Related for CVE-2015-1972