LDAP Vulnerability in IBM Tivoli Directory Server Affects User Password Security
CVE-2011-1822

Currently unrated

Key Information:

Vendor

IBM
Status
Tivoli Directory Server
Vendor
CVE Published:
21 April 2011

What is CVE-2011-1822?

The LDAP_ADD implementation in IBM Tivoli Directory Server (TDS) 5.2 prior to version 5.2.0.5-TIV-ITDS-IF0009 has a flaw that results in the storage of cleartext SHA passwords within the change log. This oversight potentially allows local users to extract sensitive user password information simply by accessing the change log, thereby compromising overall password security and user confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.ibm.com/support/docview.wss?uid=swg1IO11882
vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=swg24029663
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.