Vulnerability in Ibm Tivoli Directory Server
CVE-2015-2019
IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not prevent caching of documents retrieved in SSL sessions, which allows physically proximate attackers to obtain sensitive information by leveraging an unattended workstation.
EPSS: 0.004 (35.5th percentile) — read the EPSS interpretation.
Affected products
- Ibm Tivoli_directory_server — versions 6.0, 6.1.0, 6.2.0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)