Lucene search

[email protected]CVE-2015-1959

HistoryJun 28, 2015 - 3:59 p.m.

CVE-2015-1959

2015-06-2815:59:00

CWE-284

[email protected]

web.nvd.nist.gov

ibm

tivoli

security

directory server

cve-2015-1959

encryption

vulnerability

7.7 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not properly restrict encrypted files, which allows local users to obtain sensitive information or possibly have unspecified other impact via a (1) download or (2) upload action.

CPENameOperatorVersion
ibm:tivoli_directory_serveribm tivoli directory servereq6.4.0
ibm:tivoli_directory_serveribm tivoli directory servereq6.0
ibm:tivoli_directory_serveribm tivoli directory servereq6.3.0.0
ibm:tivoli_directory_serveribm tivoli directory servereq6.2.0.0
ibm:tivoli_directory_serveribm tivoli directory servereq6.1.0
ibm:tivoli_directory_serveribm tivoli directory servereq6.3.1.0

CPE	Name	Operator	Version
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.4.0
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.0
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.3.0.0
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.2.0.0
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.1.0
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.3.1.0

References

www-01.ibm.com/support/docview.wss?uid=swg21960659

www.securityfocus.com/bid/75442

www.securitytracker.com/id/1032734

7.7 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2015-1959

prion1 cvelist1 ibm1