Security Bulletin: IBM Security Directory Server vulnerable to multiple issues (CVE-2019-4563, CVE-2019-4547)

Summary Multiple security vulnerabilities have been fixed and delivered in IBM Security Directory Server. Vulnerability Details CVEID: CVE-2019-4563 DESCRIPTION: IBM Security Directory Server does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to ge...

CVE-2019-4547

CVE-2019-4547 affects IBM Security Directory Server 6.4.0. The vulnerability arises when the server generates an error message that reveals sensitive information about its environment, users, or data. The IBM bulletin identifies the affected product/version and provides a patch: 6.4.0.22-ISS-ISDS...