CVE-2019-4538

IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicio...

CVE-2019-4542

IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 165815...

CVE-2019-4539

IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system. IBM X-Force ID: 165812...

PT-2019-17125 · Ibm · Ibm Security Directory Server

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Server version 6.4.0 Description: The issue discloses sensitive information to unauthorized users, which can be used to mount further attacks on the system. Recommendations: For IBM Security Directory Server version...

PT-2019-17116 · Ibm · Ibm Security Directory Server

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Server version 6.4.0 Description: The issue is related to an inadequate account lockout setting, which could allow a remote attacker to brute force account credentials. Recommendations: For IBM Security Directory Server...

Security Bulletin: Multiple security vulnerabilities have been addressed in IBM Security Directory Server

Summary Multiple security vulnerabilities have been fixed and delivered in IBM Security Directory Server. Vulnerability Details CVEID: CVE-2019-4520 DESCRIPTION: IBM Security Directory Server uses an inadequate account lockout setting that could allow a remote attacker to brute force account...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Directory Server

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM Security Directory Server SDS. Vulnerability Details CVEID: CVE-2018-3180 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded, JRockit JSSE...

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Security Directory Server (CVE-2018-1902, CVE-2018-1926, CVE-2019-4030, CVE-2019-4046,CVE-2019-4080)

Summary IBM WebSphere Application Server WAS is shipped with IBM Security Directory Server ISDS. Information about security vulnerabilities affecting IBM WebSphere Application Server have been published in a security bulletin. Vulnerability Details Refer to the security bulletin listed in the...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Directory Server (CVE-2018-1996)

Summary IBM WebSphere Application Server WAS is shipped with IBM Security Directory Server ISDS. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletin listed in the...

Security Bulletin: IBM Security Directory Server is affected by multiple vulnerabilities in GSKit

Summary IBM Security Directory Server has addressed the following vulnerabilities caused by issues in GSKit. Vulnerability Details CVEID: CVE-2018-1427 DESCRIPTION: IBM GSKit contains several enviornment variables that a local attacker could overflow and cause a denial of service. CVSS Base Score...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Directory Server

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 and Version 8 used by IBM Security Directory Server SDS. These issues were disclosed as part of the IBM Java SDK updates in July 2018, April 2018, January 2018, October 2017, July 2017, and January 2017...

Security Bulletin: Vulnerabilities in GSKit affect IBM Tivoli Directory Server and IBM Security Directory Server for AIX

Summary There are multiple vulnerabilities in GSKit that affect IBM Tivoli Directory Server and IBM Security Directory Server for AIX. Vulnerability Details CVEID: CVE-2018-1388 DESCRIPTION: GSKit V7 may disclose side channel information via discrepencies between valid and invalid PKCS1 padding...

Vulnerabilities in GSKit affect IBM Tivoli Directory Server and IBM Security Directory Server for AIX

IBM SECURITY ADVISORY First Issued: Fri Dec 14 12:09:04 CST 2018 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/itdsadvisory2.asc https://aix.software.ibm.com/aix/efixes/security/itdsadvisory2.asc...

Security Bulletin: IBM Security Directory Server is affected by a vulnerability in GSKit

Summary IBM Security Directory Server has addressed the following vulnerability caused by an issue in GSKit. Vulnerability Details CVEID: CVE-2018-1388 DESCRIPTION: GSKit V7 may disclose side channel information via discrepencies between valid and invalid PKCS1 padding. CVSS Base Score: 9.1 CVSS...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Directory Server (CVE-2018-1695)

Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Security Directory Server SDS. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletins...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Directory Server for AIX/VIOS (CVE-2015-1788)

Summary OpenSSL is vulnerable to a denial of service, caused by an error when processing an ECParameters structure over a specially crafted binary polynomial field. A remote attacker could exploit this vulnerability to cause the application to enter into an infinite loop. Vulnerability Details...

Security Bulletin: GSKit TLS Padding Vulnerability affects IBM Tivoli/Security Server on Asset and Service Management (CVE-2014-8730)

Summary IBM Tivoli/Security Directory Server ITDS/ISDS are affected by a TLS padding vulnerability, which could allow a remote attacker to obtain sensitive information. Vulnerability Details CVE-ID: CVE-2014-8730 DESCRIPTION: IBM Security Directory Server could allow a remote attacker to obtain...

Security Bulletin: TLS padding vulnerability affects IBM Tivoli/Security Directory Server shipped with IBM Tivoli Network Performance Manager Wireless Platform (CVE-2014-8730)

Summary IBM Tivoli/Security Directory Server ITDS/ISDS as a component of IBM Tivoli Network Performance Manager Wireless Platform are affected by a TLS padding vulnerability, which could allow a remote attacker to obtain sensitive information Vulnerability Details The following vulnerability...

Security Bulletin: A security vulnerability has been identified in IBM Websphere Application Server shipped with IBM Security Directory Server (CVE-2017-1731)

Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Security Directory Server ISDS. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin...

Security Bulletin: A security vulnerability has been identified in IBM Websphere Application Server shipped with IBM Security Directory Server (CVE-2017-1741)

Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Security Directory Server ISDS. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin...