CVE-2015-1959

IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not properly restrict encrypted files, which allows local users to obtain sensitive information or possibly have unspecified other impact via a (1) download or (2) upload action.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.6 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:P/A:P
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
VendorProductVersion
ibmtivoli_directory_server
6.0
ibmtivoli_directory_server
6.1.0
ibmtivoli_directory_server
6.2.0.0
ibmtivoli_directory_server
6.3.0.0
ibmtivoli_directory_server
6.3.1.0
ibmtivoli_directory_server
6.4.0
𝑥
= Vulnerable software versions