Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIbmCVE-2015-1977
HistoryJul 15, 2016 - 6:59 p.m.

CVE-2015-1977

2016-07-1518:59:00
CWE-200
ibm
web.nvd.nist.gov
27
cve
2015
1977
directory traversal
vulnerability
ibm
tivoli
directory server
itds
isds
security
remote attack
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.003

Percentile

68.4%

JSON

Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server (ISDS) before 6.3.1.18-ISS-ISDS-IF0018 and 6.4.x before 6.4.0.9-ISS-ISDS-IF0009 allows remote attackers to read arbitrary files via a … (dot dot) in a URL.

Affected configurations

Nvd
Node
ibmtivoli_directory_serverMatch6.2.0
OR
ibmtivoli_directory_serverMatch6.2.0.0
OR
ibmtivoli_directory_serverMatch6.2.0.1
OR
ibmtivoli_directory_serverMatch6.2.0.2
OR
ibmtivoli_directory_serverMatch6.2.0.3
OR
ibmtivoli_directory_serverMatch6.2.0.4
OR
ibmtivoli_directory_serverMatch6.2.0.5
OR
ibmtivoli_directory_serverMatch6.2.0.6
OR
ibmtivoli_directory_serverMatch6.2.0.7
OR
ibmtivoli_directory_serverMatch6.2.0.8
OR
ibmtivoli_directory_serverMatch6.2.0.10
OR
ibmtivoli_directory_serverMatch6.2.0.11
OR
ibmtivoli_directory_serverMatch6.2.0.12
OR
ibmtivoli_directory_serverMatch6.2.0.13
OR
ibmtivoli_directory_serverMatch6.2.0.14
OR
ibmtivoli_directory_serverMatch6.2.0.15
OR
ibmtivoli_directory_serverMatch6.2.0.19
OR
ibmtivoli_directory_serverMatch6.2.0.20
OR
ibmtivoli_directory_serverMatch6.2.0.21
OR
ibmtivoli_directory_serverMatch6.2.0.22
OR
ibmtivoli_directory_serverMatch6.2.0.23
OR
ibmtivoli_directory_serverMatch6.2.0.24
OR
ibmtivoli_directory_serverMatch6.2.0.25
OR
ibmtivoli_directory_serverMatch6.2.0.26
OR
ibmtivoli_directory_serverMatch6.2.0.27
OR
ibmtivoli_directory_serverMatch6.2.0.29
OR
ibmtivoli_directory_serverMatch6.2.0.30
OR
ibmtivoli_directory_serverMatch6.2.0.31
OR
ibmtivoli_directory_serverMatch6.2.0.32
OR
ibmtivoli_directory_serverMatch6.2.0.33
OR
ibmtivoli_directory_serverMatch6.2.0.34
OR
ibmtivoli_directory_serverMatch6.2.0.35
OR
ibmtivoli_directory_serverMatch6.2.0.36
OR
ibmtivoli_directory_serverMatch6.2.0.37
OR
ibmtivoli_directory_serverMatch6.2.0.38
OR
ibmtivoli_directory_serverMatch6.2.0.39
OR
ibmtivoli_directory_serverMatch6.2.0.40
OR
ibmtivoli_directory_serverMatch6.2.0.41
OR
ibmtivoli_directory_serverMatch6.2.0.42
OR
ibmtivoli_directory_serverMatch6.2.0.43
OR
ibmtivoli_directory_serverMatch6.2.0.44
OR
ibmtivoli_directory_serverMatch6.2.0.45
OR
ibmtivoli_directory_serverMatch6.2.0.46
OR
ibmtivoli_directory_serverMatch6.2.0.47
OR
ibmtivoli_directory_serverMatch6.2.0.48
OR
ibmtivoli_directory_serverMatch6.2.0.49
Node
ibmtivoli_directory_serverMatch6.3.0
OR
ibmtivoli_directory_serverMatch6.3.0.0
OR
ibmtivoli_directory_serverMatch6.3.0.1
OR
ibmtivoli_directory_serverMatch6.3.0.2
OR
ibmtivoli_directory_serverMatch6.3.0.8
OR
ibmtivoli_directory_serverMatch6.3.0.9
OR
ibmtivoli_directory_serverMatch6.3.0.10
OR
ibmtivoli_directory_serverMatch6.3.0.11
OR
ibmtivoli_directory_serverMatch6.3.0.12
OR
ibmtivoli_directory_serverMatch6.3.0.14
OR
ibmtivoli_directory_serverMatch6.3.0.15
OR
ibmtivoli_directory_serverMatch6.3.0.17
OR
ibmtivoli_directory_serverMatch6.3.0.18
OR
ibmtivoli_directory_serverMatch6.3.0.19
OR
ibmtivoli_directory_serverMatch6.3.0.21
OR
ibmtivoli_directory_serverMatch6.3.0.22
OR
ibmtivoli_directory_serverMatch6.3.0.23
OR
ibmtivoli_directory_serverMatch6.3.0.24
OR
ibmtivoli_directory_serverMatch6.3.0.25
OR
ibmtivoli_directory_serverMatch6.3.0.26
OR
ibmtivoli_directory_serverMatch6.3.0.27
OR
ibmtivoli_directory_serverMatch6.3.0.28
OR
ibmtivoli_directory_serverMatch6.3.0.29
OR
ibmtivoli_directory_serverMatch6.3.0.30
OR
ibmtivoli_directory_serverMatch6.3.0.31
OR
ibmtivoli_directory_serverMatch6.3.0.32
OR
ibmtivoli_directory_serverMatch6.3.0.33
OR
ibmtivoli_directory_serverMatch6.3.0.34
OR
ibmtivoli_directory_serverMatch6.3.0.35
OR
ibmtivoli_directory_serverMatch6.3.0.36
OR
ibmtivoli_directory_serverMatch6.3.0.37
OR
ibmtivoli_directory_serverMatch6.3.0.38
OR
ibmtivoli_directory_serverMatch6.3.0.39
OR
ibmtivoli_directory_serverMatch6.3.0.40
OR
ibmtivoli_directory_serverMatch6.3.0.41
OR
ibmtivoli_directory_serverMatch6.3.0.42
OR
ibmtivoli_directory_serverMatch6.3.1.0
OR
ibmtivoli_directory_serverMatch6.3.1.5
OR
ibmtivoli_directory_serverMatch6.3.1.6
OR
ibmtivoli_directory_serverMatch6.3.1.7
OR
ibmtivoli_directory_serverMatch6.3.1.8
OR
ibmtivoli_directory_serverMatch6.3.1.9
Node
ibmtivoli_directory_serverMatch6.1.0
OR
ibmtivoli_directory_serverMatch6.1.0.0
OR
ibmtivoli_directory_serverMatch6.1.0.1
OR
ibmtivoli_directory_serverMatch6.1.0.2
OR
ibmtivoli_directory_serverMatch6.1.0.3
OR
ibmtivoli_directory_serverMatch6.1.0.4
OR
ibmtivoli_directory_serverMatch6.1.0.5
OR
ibmtivoli_directory_serverMatch6.1.0.6
OR
ibmtivoli_directory_serverMatch6.1.0.7
OR
ibmtivoli_directory_serverMatch6.1.0.8
OR
ibmtivoli_directory_serverMatch6.1.0.9
OR
ibmtivoli_directory_serverMatch6.1.0.10
OR
ibmtivoli_directory_serverMatch6.1.0.11
OR
ibmtivoli_directory_serverMatch6.1.0.12
OR
ibmtivoli_directory_serverMatch6.1.0.13
OR
ibmtivoli_directory_serverMatch6.1.0.14
OR
ibmtivoli_directory_serverMatch6.1.0.15
OR
ibmtivoli_directory_serverMatch6.1.0.17
OR
ibmtivoli_directory_serverMatch6.1.0.18
OR
ibmtivoli_directory_serverMatch6.1.0.19
OR
ibmtivoli_directory_serverMatch6.1.0.20
OR
ibmtivoli_directory_serverMatch6.1.0.21
OR
ibmtivoli_directory_serverMatch6.1.0.22
OR
ibmtivoli_directory_serverMatch6.1.0.23
OR
ibmtivoli_directory_serverMatch6.1.0.24
OR
ibmtivoli_directory_serverMatch6.1.0.25
OR
ibmtivoli_directory_serverMatch6.1.0.26
OR
ibmtivoli_directory_serverMatch6.1.0.27
OR
ibmtivoli_directory_serverMatch6.1.0.28
OR
ibmtivoli_directory_serverMatch6.1.0.29
OR
ibmtivoli_directory_serverMatch6.1.0.30
OR
ibmtivoli_directory_serverMatch6.1.0.31
OR
ibmtivoli_directory_serverMatch6.1.0.32
OR
ibmtivoli_directory_serverMatch6.1.0.33
OR
ibmtivoli_directory_serverMatch6.1.0.34
OR
ibmtivoli_directory_serverMatch6.1.0.35
OR
ibmtivoli_directory_serverMatch6.1.0.36
OR
ibmtivoli_directory_serverMatch6.1.0.37
OR
ibmtivoli_directory_serverMatch6.1.0.38
OR
ibmtivoli_directory_serverMatch6.1.0.39
OR
ibmtivoli_directory_serverMatch6.1.0.40
OR
ibmtivoli_directory_serverMatch6.1.0.41
OR
ibmtivoli_directory_serverMatch6.1.0.42
OR
ibmtivoli_directory_serverMatch6.1.0.43
OR
ibmtivoli_directory_serverMatch6.1.0.44
OR
ibmtivoli_directory_serverMatch6.1.0.45
OR
ibmtivoli_directory_serverMatch6.1.0.46
OR
ibmtivoli_directory_serverMatch6.1.0.47
OR
ibmtivoli_directory_serverMatch6.1.0.48
OR
ibmtivoli_directory_serverMatch6.1.0.49
OR
ibmtivoli_directory_serverMatch6.1.0.50
OR
ibmtivoli_directory_serverMatch6.1.0.51
OR
ibmtivoli_directory_serverMatch6.1.0.52
OR
ibmtivoli_directory_serverMatch6.1.0.53
OR
ibmtivoli_directory_serverMatch6.1.0.54
OR
ibmtivoli_directory_serverMatch6.1.0.55
OR
ibmtivoli_directory_serverMatch6.1.0.56
OR
ibmtivoli_directory_serverMatch6.1.0.57
OR
ibmtivoli_directory_serverMatch6.1.0.58
OR
ibmtivoli_directory_serverMatch6.1.0.59
OR
ibmtivoli_directory_serverMatch6.1.0.60
OR
ibmtivoli_directory_serverMatch6.1.0.61
OR
ibmtivoli_directory_serverMatch6.1.0.62
OR
ibmtivoli_directory_serverMatch6.1.0.63
OR
ibmtivoli_directory_serverMatch6.1.0.64
OR
ibmtivoli_directory_serverMatch6.1.0.65
OR
ibmtivoli_directory_serverMatch6.1.0.66
OR
ibmtivoli_directory_serverMatch6.1.0.67
OR
ibmtivoli_directory_serverMatch6.1.0.68
OR
ibmtivoli_directory_serverMatch6.1.0.69
OR
ibmtivoli_directory_serverMatch6.1.0.70
OR
ibmtivoli_directory_serverMatch6.1.0.71
OR
ibmtivoli_directory_serverMatch6.1.0.72
OR
ibmtivoli_directory_serverMatch6.1.0.73
Node
ibmsecurity_directory_serverMatch6.4.0
OR
ibmsecurity_directory_serverMatch6.4.0.0
OR
ibmsecurity_directory_serverMatch6.4.0.1
OR
ibmsecurity_directory_serverMatch6.4.0.2
OR
ibmsecurity_directory_serverMatch6.4.0.3
OR
ibmsecurity_directory_serverMatch6.4.0.4
OR
ibmsecurity_directory_serverMatch6.4.0.5
OR
ibmsecurity_directory_serverMatch6.4.0.6
OR
ibmsecurity_directory_serverMatch6.4.0.7
OR
ibmsecurity_directory_serverMatch6.4.0.8
Node
ibmsecurity_directory_serverMatch6.3.1
OR
ibmsecurity_directory_serverMatch6.3.1.0
OR
ibmsecurity_directory_serverMatch6.3.1.1
OR
ibmsecurity_directory_serverMatch6.3.1.2
OR
ibmsecurity_directory_serverMatch6.3.1.3
OR
ibmsecurity_directory_serverMatch6.3.1.4
OR
ibmsecurity_directory_serverMatch6.3.1.5
OR
ibmsecurity_directory_serverMatch6.3.1.6
OR
ibmsecurity_directory_serverMatch6.3.1.7
OR
ibmsecurity_directory_serverMatch6.3.1.8
OR
ibmsecurity_directory_serverMatch6.3.1.9
OR
ibmsecurity_directory_serverMatch6.3.1.10
OR
ibmsecurity_directory_serverMatch6.3.1.11
OR
ibmsecurity_directory_serverMatch6.3.1.12
OR
ibmsecurity_directory_serverMatch6.3.1.13
OR
ibmsecurity_directory_serverMatch6.3.1.14
OR
ibmsecurity_directory_serverMatch6.3.1.15
OR
ibmsecurity_directory_serverMatch6.3.1.16
OR
ibmsecurity_directory_serverMatch6.3.1.17
VendorProductVersionCPE
ibmtivoli_directory_server6.2.0cpe:2.3:a:ibm:tivoli_directory_server:6.2.0:*:*:*:*:*:*:*
ibmtivoli_directory_server6.2.0.0cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.0:*:*:*:*:*:*:*
ibmtivoli_directory_server6.2.0.1cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.1:*:*:*:*:*:*:*
ibmtivoli_directory_server6.2.0.2cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.2:*:*:*:*:*:*:*
ibmtivoli_directory_server6.2.0.3cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.3:*:*:*:*:*:*:*
ibmtivoli_directory_server6.2.0.4cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.4:*:*:*:*:*:*:*
ibmtivoli_directory_server6.2.0.5cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.5:*:*:*:*:*:*:*
ibmtivoli_directory_server6.2.0.6cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.6:*:*:*:*:*:*:*
ibmtivoli_directory_server6.2.0.7cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.7:*:*:*:*:*:*:*
ibmtivoli_directory_server6.2.0.8cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.8:*:*:*:*:*:*:*
Rows per page:
1-10 of 1911

Related

ibm 1
cvelist 1
nvd 1
prion 1
ibm
ibm
Security Bulletin: A security vulnerability has been identified in IBM Tivoli / Security Directory Server
2018-06-16 21:44:16
cvelist
cvelist
CVE-2015-1977
2016-07-15 18:00:00
nvd
nvd
CVE-2015-1977
2016-07-15 18:59:00
prion
prion
Directory traversal
2016-07-15 18:59:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.003

Percentile

68.4%

JSON
Related for CVE-2015-1977
ibm1cvelist1nvd1prion1