CVE-2015-1975

HIGH 7.8CVE-2015-1975 · Published 03/04/2018 · updated 17/06/2026

In short

CVE-2015-1975 is a HIGH (CVSS 7.8) vulnerability affecting tivoli directory server (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 40.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tivoli directory server ibm	`= 6.0= 6.1.0= 6.2.0.0= 6.3.0.0= 6.3.1.0= 6.4.0`	No fix yet

Description

The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory Server 6.3.1 before iFix 11 and 6.4 before iFix 2 allows local users to gain privileges via vectors related to argument injection. IBM X-Force ID: 103694.

References

www-01.ibm.com/support/docview.wss · Vendor Advisory
securityfocus.com/bid/103717 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/103694 · VDB Entry

More vulnerabilities in tivoli directory server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tivoli directory server

ibm

= 6.0= 6.1.0= 6.2.0.0= 6.3.0.0= 6.3.1.0= 6.4.0

No fix yet

Description

More vulnerabilities in tivoli directory server

See all →