5.3
Medium
CVE-2019-4551 IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality…
Description
IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 165953.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Directory Server | 6.4.0 | No fix stated |
Other CVEs of Security Directory Server
The 16 CVEs of Security Directory Server →
CVE-2022-32755
IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
5.5
Medium
CVE-2022-33165
IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system
6.8
Medium
CVE-2022-33161
IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure…
5.3
Medium
CVE-2019-4563
IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies
3.7
Low