Information Disclosure Vulnerability in IBM Security Directory Server
CVE-2019-4547

5.3MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
29 October 2020

Summary

IBM Security Directory Server 6.4.0 inadvertently exposes sensitive information through error messages that reveal details about its operating environment, users, or associated data. This vulnerability can lead to unauthorized access to sensitive information, which could be exploited by attackers to compromise system integrity and user privacy. Organizations using this version should prioritize securing their servers by updating to a patched version or implementing mitigations to prevent unauthorized information disclosure.

Affected Version(s)

Security Directory Server 6.4.0

References

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.