CVE-2011-2758

2011-07-1720:00:00

mitre

www.cve.org

cve-2011-2758

idswebapp

web administration tool

ibm tivoli directory server

ldap server

authentication bypass

remote attack

AI Score

6.1

Confidence

Low

EPSS

0.004

Percentile

72.7%

JSON

IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a crafted URL.