CVE-2015-1975

Опубликовано: 03 апр. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory Server 6.3.1 before iFix 11 and 6.4 before iFix 2 allows local users to gain privileges via vectors related to argument injection. IBM X-Force ID: 103694.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21960659
Vendor Advisory
http://www.securityfocus.com/bid/103717
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/103694
VDB Entry
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21960659
Vendor Advisory
http://www.securityfocus.com/bid/103717
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/103694
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_directory_server:6.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_directory_server:6.3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_directory_server:6.4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 25%

0.00087

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-74

Связанные уязвимости

GHSA-rg6p-c7wm-93r6