Lucene search

[email protected]CVE-2015-2019

HistoryJun 28, 2015 - 3:59 p.m.

CVE-2015-2019

2015-06-2815:59:00

CWE-17

[email protected]

web.nvd.nist.gov

cve-2015-2019

ibm

tivoli

security

directory server

ssl

ifix

vulnerability

nvd

7.2 High

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

19.6%

JSON

IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not prevent caching of documents retrieved in SSL sessions, which allows physically proximate attackers to obtain sensitive information by leveraging an unattended workstation.

CPENameOperatorVersion
ibm:tivoli_directory_serveribm tivoli directory servereq6.4.0
ibm:tivoli_directory_serveribm tivoli directory servereq6.0
ibm:tivoli_directory_serveribm tivoli directory servereq6.3.0.0
ibm:tivoli_directory_serveribm tivoli directory servereq6.2.0.0
ibm:tivoli_directory_serveribm tivoli directory servereq6.1.0
ibm:tivoli_directory_serveribm tivoli directory servereq6.3.1.0

CPE	Name	Operator	Version
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.4.0
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.0
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.3.0.0
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.2.0.0
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.1.0
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.3.1.0

References

www-01.ibm.com/support/docview.wss?uid=swg21960659

www.securityfocus.com/bid/75437

www.securitytracker.com/id/1032734

7.2 High

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

19.6%

JSON

Related for CVE-2015-2019

prion1 cvelist1 ibm1