7.5
CVSSv3

CVE-2015-1977

Published: 15/07/2016 Updated: 18/07/2016
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) prior to 6.1.0.74-ISS-ISDS-IF0074, 6.2.x prior to 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x prior to 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server (ISDS) prior to 6.3.1.18-ISS-ISDS-IF0018 and 6.4.x prior to 6.4.0.9-ISS-ISDS-IF0009 allows remote malicious users to read arbitrary files via a .. (dot dot) in a URL.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm tivoli directory server 6.2.0.49

ibm tivoli directory server 6.2.0.48

ibm tivoli directory server 6.2.0.47

ibm tivoli directory server 6.2.0.39

ibm tivoli directory server 6.2.0.38

ibm tivoli directory server 6.2.0.37

ibm tivoli directory server 6.2.0.36

ibm tivoli directory server 6.2.0.21

ibm tivoli directory server 6.2.0.20

ibm tivoli directory server 6.2.0.2

ibm tivoli directory server 6.2.0.8

ibm tivoli directory server 6.2.0.7

ibm tivoli directory server 6.2.0.6

ibm tivoli directory server 6.2.0.5

ibm tivoli directory server 6.2.0.31

ibm tivoli directory server 6.2.0.30

ibm tivoli directory server 6.2.0.3

ibm tivoli directory server 6.2.0.29

ibm tivoli directory server 6.2.0.11

ibm tivoli directory server 6.2.0.10

ibm tivoli directory server 6.2.0.1

ibm tivoli directory server 6.2.0.0

ibm tivoli directory server 6.2.0.46

ibm tivoli directory server 6.2.0.44

ibm tivoli directory server 6.2.0.27

ibm tivoli directory server 6.2.0.42

ibm tivoli directory server 6.2.0.40

ibm tivoli directory server 6.2.0.34

ibm tivoli directory server 6.2.0.32

ibm tivoli directory server 6.2.0.26

ibm tivoli directory server 6.2.0.24

ibm tivoli directory server 6.2.0.22

ibm tivoli directory server 6.2.0.15

ibm tivoli directory server 6.2.0.13

ibm tivoli directory server 6.2.0.19

ibm tivoli directory server 6.2.0.45

ibm tivoli directory server 6.2.0.43

ibm tivoli directory server 6.2.0.41

ibm tivoli directory server 6.2.0.4

ibm tivoli directory server 6.2.0.35

ibm tivoli directory server 6.2.0.33

ibm tivoli directory server 6.2.0.25

ibm tivoli directory server 6.2.0.23

ibm tivoli directory server 6.2.0.14

ibm tivoli directory server 6.2.0.12

ibm tivoli directory server 6.2.0

ibm tivoli directory server 6.3.1.5

ibm tivoli directory server 6.3.1.0

ibm tivoli directory server 6.3.0.9

ibm tivoli directory server 6.3.0.8

ibm tivoli directory server 6.3.0.23

ibm tivoli directory server 6.3.0.22

ibm tivoli directory server 6.3.0.21

ibm tivoli directory server 6.3.0.2

ibm tivoli directory server 6.3.0.19

ibm tivoli directory server 6.3.0.41

ibm tivoli directory server 6.3.1.8

ibm tivoli directory server 6.3.1.6

ibm tivoli directory server 6.3.0.35

ibm tivoli directory server 6.3.0.33

ibm tivoli directory server 6.3.0.26

ibm tivoli directory server 6.3.0.24

ibm tivoli directory server 6.3.0.17

ibm tivoli directory server 6.3.0.14

ibm tivoli directory server 6.3.0.0

ibm tivoli directory server 6.3.0.40

ibm tivoli directory server 6.3.0.39

ibm tivoli directory server 6.3.0.38

ibm tivoli directory server 6.3.0.37

ibm tivoli directory server 6.3.0.36

ibm tivoli directory server 6.3.0.31

ibm tivoli directory server 6.3.0.30

ibm tivoli directory server 6.3.0.29

ibm tivoli directory server 6.3.0.28

ibm tivoli directory server 6.3.0.12

ibm tivoli directory server 6.3.0.11

ibm tivoli directory server 6.3.0.10

ibm tivoli directory server 6.3.0.1

ibm tivoli directory server 6.3.0.42

ibm tivoli directory server 6.3.1.9

ibm tivoli directory server 6.3.1.7

ibm tivoli directory server 6.3.0.34

ibm tivoli directory server 6.3.0.32

ibm tivoli directory server 6.3.0.27

ibm tivoli directory server 6.3.0.25

ibm tivoli directory server 6.3.0.18

ibm tivoli directory server 6.3.0.15

ibm tivoli directory server 6.3.0

ibm tivoli directory server 6.1.0.72

ibm tivoli directory server 6.1.0.71

ibm tivoli directory server 6.1.0.70

ibm tivoli directory server 6.1.0.69

ibm tivoli directory server 6.1.0.59

ibm tivoli directory server 6.1.0.58

ibm tivoli directory server 6.1.0.57

ibm tivoli directory server 6.1.0.56

ibm tivoli directory server 6.1.0.43

ibm tivoli directory server 6.1.0.42

ibm tivoli directory server 6.1.0.41

ibm tivoli directory server 6.1.0.40

ibm tivoli directory server 6.1.0.29

ibm tivoli directory server 6.1.0.28

ibm tivoli directory server 6.1.0.27

ibm tivoli directory server 6.1.0.26

ibm tivoli directory server 6.1.0.12

ibm tivoli directory server 6.1.0.11

ibm tivoli directory server 6.1.0.10

ibm tivoli directory server 6.1.0.1

ibm tivoli directory server 6.1.0.67

ibm tivoli directory server 6.1.0.8

ibm tivoli directory server 6.1.0.61

ibm tivoli directory server 6.1.0.6

ibm tivoli directory server 6.1.0.55

ibm tivoli directory server 6.1.0.53

ibm tivoli directory server 6.1.0.47

ibm tivoli directory server 6.1.0.45

ibm tivoli directory server 6.1.0.39

ibm tivoli directory server 6.1.0.37

ibm tivoli directory server 6.1.0.32

ibm tivoli directory server 6.1.0.30

ibm tivoli directory server 6.1.0.24

ibm tivoli directory server 6.1.0.22

ibm tivoli directory server 6.1.0.15

ibm tivoli directory server 6.1.0.13

ibm tivoli directory server 6.1.0.0

ibm tivoli directory server 6.1.0.66

ibm tivoli directory server 6.1.0.65

ibm tivoli directory server 6.1.0.64

ibm tivoli directory server 6.1.0.63

ibm tivoli directory server 6.1.0.51

ibm tivoli directory server 6.1.0.50

ibm tivoli directory server 6.1.0.5

ibm tivoli directory server 6.1.0.49

ibm tivoli directory server 6.1.0.36

ibm tivoli directory server 6.1.0.35

ibm tivoli directory server 6.1.0.34

ibm tivoli directory server 6.1.0.33

ibm tivoli directory server 6.1.0.20

ibm tivoli directory server 6.1.0.2

ibm tivoli directory server 6.1.0.19

ibm tivoli directory server 6.1.0.18

ibm tivoli directory server 6.1.0.73

ibm tivoli directory server 6.1.0.68

ibm tivoli directory server 6.1.0.9

ibm tivoli directory server 6.1.0.7

ibm tivoli directory server 6.1.0.62

ibm tivoli directory server 6.1.0.60

ibm tivoli directory server 6.1.0.54

ibm tivoli directory server 6.1.0.52

ibm tivoli directory server 6.1.0.48

ibm tivoli directory server 6.1.0.46

ibm tivoli directory server 6.1.0.44

ibm tivoli directory server 6.1.0.4

ibm tivoli directory server 6.1.0.38

ibm tivoli directory server 6.1.0.31

ibm tivoli directory server 6.1.0.3

ibm tivoli directory server 6.1.0.25

ibm tivoli directory server 6.1.0.23

ibm tivoli directory server 6.1.0.21

ibm tivoli directory server 6.1.0.17

ibm tivoli directory server 6.1.0.14

ibm tivoli directory server 6.1.0

ibm security directory server 6.4.0.2

ibm security directory server 6.4.0.0

ibm security directory server 6.4.0.7

ibm security directory server 6.4.0.6

ibm security directory server 6.4.0.5

ibm security directory server 6.4.0.4

ibm security directory server 6.4.0.3

ibm security directory server 6.4.0.8

ibm security directory server 6.4.0.1

ibm security directory server 6.4.0

ibm security directory server 6.3.1.17

ibm security directory server 6.3.1.16

ibm security directory server 6.3.1.15

ibm security directory server 6.3.1.3

ibm security directory server 6.3.1.2

ibm security directory server 6.3.1.1

ibm security directory server 6.3.1

ibm security directory server 6.3.1.10

ibm security directory server 6.3.1.12

ibm security directory server 6.3.1.0

ibm security directory server 6.3.1.5

ibm security directory server 6.3.1.11

ibm security directory server 6.3.1.9

ibm security directory server 6.3.1.8

ibm security directory server 6.3.1.7

ibm security directory server 6.3.1.14

ibm security directory server 6.3.1.13

ibm security directory server 6.3.1.6

ibm security directory server 6.3.1.4