Open Redirect Vulnerability in IBM Security Directory Server 6.4.0
CVE-2019-4538

7.4HIGH

Key Information:

Vendor

IBM
Status
Security Directory Server
Vendor
CVE Published:
2 October 2019

What is CVE-2019-4538?

IBM Security Directory Server 6.4.0 is susceptible to an open redirect vulnerability that allows remote attackers to conduct phishing attacks. By manipulating URLs, an attacker can deceive a victim into visiting a malicious site that masquerades as a trusted domain. This technique not only enables URL spoofing but also compromises sensitive information and facilitates further attacks against the victim. Organizations using this version of the server need to implement security measures to mitigate potential threats stemming from this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Security Directory Server 6.4.0

References

https://www.ibm.com/support/pages/node/1077045
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/165660
vdb-entryx_refsource_XF

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.