Skip to main content

Security Directory Server CVE-2015-1976

MEDIUM
Improper Access Control (CWE-284)
2017-02-08 psirt@us.ibm.com
IBM Authentication Bypass Security Directory Server Tivoli Directory Server
5.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Feb 08, 2017 - 22:59 cve.org
MEDIUM 5.5

DescriptionCVE.org

IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash.

AnalysisAI

IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-284. IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash. Affected products include: Ibm Security Directory Server, Ibm Tivoli Directory Server.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Security Directory Server

View all
CVE-2019-4538 HIGH
8.2 Oct 02

IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect at
CVE-2013-6747 HIGH
7.1 Jan 27

IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Direc
CVE-2015-1977 HIGH
7.5 Jul 15

Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-I
CVE-2019-4520 HIGH
7.5 Oct 02

IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to bru
CVE-2019-4539 HIGH
7.1 Oct 02

IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attacke
CVE-2019-4542 MEDIUM
6.1 Oct 02

IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. Rated medium severity (CVSS 6.1), this vulner
CVE-2024-28772 MEDIUM
5.4 Jul 25

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 is vulnerable to stored cros
CVE-2019-4549 MEDIUM
5.3 Oct 02

IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. Rated medium severity (CVSS 5
CVE-2014-6100 LOW
3.5 Oct 19

Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0

Same weakness CWE-284 – Improper Access Control

View all
CVE-2012-4681 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2012-5076 CRITICAL POC
9.8
CVE-2014-3120 HIGH POC
8.1
CVE-2013-2423 LOW POC
3.7
CVE-2016-3427 CRITICAL
9.8
CVE-2025-12480 CRITICAL POC
9.1

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2015-1976 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy