8 results (0.002 seconds)

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2019-4562

https://notcve.org/view.php?id=CVE-2019-4562

04 Feb 2020 — IBM Security Directory Server 6.4.0 stores sensitive information in URLs. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history. IBM X-Force ID: 166623. IBM Security Directory Server versión 6.4.0, almacena información confidencial en URL. Esto puede conllevar a una divulgación de información si partes no autorizadas tienen acceso a las URL por medio de registros del servidor, encabezado de referencia o historial del navega... • https://exchange.xforce.ibmcloud.com/vulnerabilities/166623 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2019-4551

https://notcve.org/view.php?id=CVE-2019-4551

04 Feb 2020 — IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 165953. IBM Security Directory Server versión 6.4.0, no realiza una comprobación de autenticación para un recurso crítico o funcionalidad, permitiendo a usuarios anónimos acceder a áreas protegidas. ID de IBM X-Force: 165953. • https://exchange.xforce.ibmcloud.com/vulnerabilities/165953 • CWE-306: Missing Authentication for Critical Function •

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2019-4550

https://notcve.org/view.php?id=CVE-2019-4550

04 Feb 2020 — IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952. IBM Security Directory Server versión 6.4.0, se implementa con un código de depuración activo que puede crear puntos de entrada no previstos. ID de IBM X-Force: 165952. • https://exchange.xforce.ibmcloud.com/vulnerabilities/165952 •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2019-4548

https://notcve.org/view.php?id=CVE-2019-4548

04 Feb 2020 — IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 165950. IBM Security Directory Server versión 6.4.0, podría permitir a un atacante remoto secuestrar la acción de cliqueo de la víctima. Al persuadir a una víctima para que visite un siti... • https://exchange.xforce.ibmcloud.com/vulnerabilities/165950 • CWE-1021: Improper Restriction of Rendered UI Layers or Frames •

CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 0

CVE-2019-4541

https://notcve.org/view.php?id=CVE-2019-4541

04 Feb 2020 — IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 165814. IBM Security Directory Server versión 6.4.0, usa listas negras incompletas para la comprobación de entrada que permite a atacantes omitir los controles de la aplicación, resultando en un impacto directo al sistema y la integridad de los datos. ID de IBM X-Force: 165814. • https://exchange.xforce.ibmcloud.com/vulnerabilities/165814 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2019-4540

https://notcve.org/view.php?id=CVE-2019-4540

04 Feb 2020 — IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 165813. IBM Security Directory Server versión 6.4.0, utiliza algoritmos criptográficos más débiles de lo esperado que podrían permitir a un atacante descifrar información altamente confidencial. ID de IBM X-Force: 165813. • https://exchange.xforce.ibmcloud.com/vulnerabilities/165813 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •

CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2015-1976

https://notcve.org/view.php?id=CVE-2015-1976

08 Feb 2017 — IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash. IBM Security Directory Server podría permitir a un usuario autenticado ejecutar comandos en la herramienta de administración web que causaría la caída de la herramienta. • http://www.ibm.com/support/docview.wss?uid=swg21980585 • CWE-284: Improper Access Control •

CVSS: 7.5EPSS: 0%CPEs: 191EXPL: 0

CVE-2015-1977

https://notcve.org/view.php?id=CVE-2015-1977

15 Jul 2016 — Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server (ISDS) before 6.3.1.18-ISS-ISDS-IF0018 and 6.4.x before 6.4.0.9-ISS-ISDS-IF0009 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL. Vulnerabilidad de salto de directorio en la herramienta Web Administration en IBM Tivoli Directory Serve... • http://www-01.ibm.com/support/docview.wss?uid=swg21986452 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •