CVE-2015-1959

IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not properly restrict encrypted files, which allows local users to obtain sensitive information or possibly have unspecified other impact via a (1) download or (2) upload action.

Score

CVSS 2.0 4.6 Medium

Status

Modified - psirt@us.ibm.com

Published

2015-06-28

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Tivoli Directory Server (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21960659
• http://www.securityfocus.com/bid/75442
• http://www.securitytracker.com/id/1032734