Lucene search
HistoryJun 28, 2015 - 3:59 p.m.
CVE-2015-1972
cve-2015-1972
ibm tivoli
security directory server
nvd
remote attackers
sensitive information
post request
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
7.1 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.7%
IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to obtain sensitive error-log information via a crafted POST request.
Affected configurations
Node
ibmtivoli_directory_serverMatch6.0
ORibmtivoli_directory_serverMatch6.1.0
ORibmtivoli_directory_serverMatch6.2.0.0
ORibmtivoli_directory_serverMatch6.3.0.0
ORibmtivoli_directory_serverMatch6.3.1.0
ORibmtivoli_directory_serverMatch6.4.0
Related
nvd
nvd
CVE-2015-1972
2015-06-28 15:59:01
cvelist
cvelist
CVE-2015-1972
2015-06-28 15:00:00
prion
prion
Cross site request forgery (csrf)
2015-06-28 15:59:00
ibm
ibm
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
7.1 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.7%
Related for CVE-2015-1972