Input Validation Vulnerabilities in IBM Security Directory Server
CVE-2019-4541
6.5MEDIUM
Summary
The IBM Security Directory Server 6.4.0 has a flaw in its input validation mechanics as it employs incomplete blacklisting methods. This weakness enables attackers to circumvent established application controls, potentially leading to significant breaches in system functionality and data integrity. Such vulnerabilities can have widespread implications, making it critical for users and administrators to apply necessary patches and follow security best practices.
Affected Version(s)
Security Directory Server 6.4.0
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved