CVE-2015-2019

EUVD-2015-2132
IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not prevent caching of documents retrieved in SSL sessions, which allows physically proximate attackers to obtain sensitive information by leveraging an unattended workstation.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
Affected Products (NVD)
VendorProductVersion
ibmtivoli_directory_server
6.0
ibmtivoli_directory_server
6.1.0
ibmtivoli_directory_server
6.2.0.0
ibmtivoli_directory_server
6.3.0.0
ibmtivoli_directory_server
6.3.1.0
ibmtivoli_directory_server
6.4.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg21960659
http://www.securityfocus.com/bid/75437
http://www.securitytracker.com/id/1032734
http://www-01.ibm.com/support/docview.wss?uid=swg21960659
http://www.securityfocus.com/bid/75437
http://www.securitytracker.com/id/1032734