CVE-2011-1822

Currently unrated

Key Information:

Vendor
IBM
Status
Tivoli Directory Server
Vendor
CVE Published:
21 April 2011

Summary

The LDAP_ADD implementation in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0009 stores a cleartext SHA password in the change log, which might allow local users to obtain sensitive information by reading this log.

References

http://www.ibm.com/support/docview.wss?uid=swg1IO11882
vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=swg24029663
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.