6.5
Moyenne
CVE-2019-4541 IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass…
Description
IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 165814.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Directory Server | 6.4.0 | Pas de correctif indiqué |
Autres CVE de Security Directory Server
Les 16 CVE de Security Directory Server →
CVE-2022-32755
IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
5.5
Moyenne
CVE-2022-33165
IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system
6.8
Moyenne
CVE-2022-33161
IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure…
5.3
Moyenne
CVE-2019-4563
IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies
3.7
Faible