CVE-2015-1972 — MEDIUM (4.3)

Vulnerability Description

IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to obtain sensitive error-log information via a crafted POST request.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:P/I:N/A:N

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Ibm	Tivoli Directory Server	6.0

Related Weaknesses (CWE)

CWE-200

References

http://www-01.ibm.com/support/docview.wss?uid=swg21960659PatchVendor Advisory
http://www.securityfocus.com/bid/75441Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032734Third Party AdvisoryVDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg21960659PatchVendor Advisory
http://www.securityfocus.com/bid/75441Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032734Third Party AdvisoryVDB Entry

FAQ

What is CVE-2015-1972?

CVE-2015-1972 is a vulnerability with a CVSS score of 4.3 (MEDIUM). IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to obtain sensi...

How severe is CVE-2015-1972?

CVE-2015-1972 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-1972?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Tivoli Directory Server.