Information Disclosure in IBM Security Directory Server 6.4.0
CVE-2019-4562
3.7LOW
Summary
IBM Security Directory Server 6.4.0 is susceptible to a vulnerability that leads to the exposure of sensitive information through URLs. This occurs when unauthorized users gain access to URLs potentially stored in various locations such as server logs, the referer header, or a user’s browser history. With this exposure, there is a risk of significant information disclosure.
Affected Version(s)
Security Directory Server 6.4.0
References
CVSS V3.1
Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved