Information disclosure

2020-02-0417:15:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.1%

JSON

IBM Security Directory Server 6.4.0 stores sensitive information in URLs. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history. IBM X-Force ID: 166623.

CPENameOperatorVersion
security_directory_serverge6.4.0.0
security_directory_serverlt6.4.0.20

CPE	Name	Operator	Version
	security_directory_server	ge	6.4.0.0
	security_directory_server	lt	6.4.0.20

References

exchange.xforce.ibmcloud.com/vulnerabilities/166623

www.ibm.com/support/pages/node/1288660