Information Disclosure in IBM Security Directory Server 6.4.0
CVE-2019-4562

3.7LOW

Key Information:

Vendor
IBM
Status
Security Directory Server
Vendor
CVE Published:
4 February 2020

Summary

IBM Security Directory Server 6.4.0 is susceptible to a vulnerability that leads to the exposure of sensitive information through URLs. This occurs when unauthorized users gain access to URLs potentially stored in various locations such as server logs, the referer header, or a user’s browser history. With this exposure, there is a risk of significant information disclosure.

Affected Version(s)

Security Directory Server 6.4.0

References

https://www.ibm.com/support/pages/node/1288660
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/166623
vdb-entryx_refsource_XF

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.