Remote Code Execution Vulnerability in IBM Tivoli Security Directory Server
CVE-2015-1972

Currently unrated

Key Information:

Vendor
IBM
Status
Tivoli Directory Server
Vendor
CVE Published:
28 June 2015

Summary

IBM Tivoli Security Directory Server versions prior to specified iFixes are susceptible to a vulnerability that enables remote attackers to exploit crafted POST requests to expose sensitive error-log information. This exposure poses significant risks, as it may reveal critical details that could be used to facilitate further attacks.

References

http://www.securitytracker.com/id/1032734
vdb-entryx_refsource_SECTRACK
http://www-01.ibm.com/support/docview.wss?uid=swg21960659
x_refsource_CONFIRM
http://www.securityfocus.com/bid/75441
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.