Security Directory Server vulnerabilities
4 known vulnerabilities in Security Directory Server from IBM. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0…
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an unauthorized user to obtain sensitive information. IBM X-Force ID: 228565.
- 7.5 High severity
Security Directory Server: Improper Limitation of a Pathname to a Restricted Directory
IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 228582.
- 9.1 Critical severity
Security Directory Server: Improper Restriction of XML External Entity Reference
IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228505.
- 9.1 Critical severity
Security Directory Integrator: Improper Limitation of a Pathname to a Restricted Directory
IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view or write to arbitrary files on the system. IBM X-Force