CVE-2011-2758

IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server TDS 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a crafted URL...

CVE-2011-2758: Improper Authentication

IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server TDS 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a crafted URL...

PT-2011-4068

Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server TDS versions 6.2 through 6.2.0.3-TIV-ITDS-IF0004 Description The issue allows remote attackers to obtain sensitive information via a crafted URL because authentication is not required for access to LDAP Server log...