IBM Security Directory Server CVE-2015-1975 Remote Security Bypass Vulnerability

Bugtraq ID:	103717
Class:	Access Validation Error
CVE:	CVE-2015-1975
Remote:	Yes
Local:	No
Published:	Apr 03 2018 12:00AM
Updated:	Apr 03 2018 12:00AM
Credit:	IBM
Vulnerable:	IBM Tivoli Directory Server 6.3 IBM Tivoli Directory Server 6.2 IBM Tivoli Directory Server 6.1 IBM Tivoli Directory Server 6.0 IBM Security Directory Server 6.4 IBM Security Directory Server 6.3.1
Not Vulnerable:	IBM Tivoli Directory Server 6.3 iFix 37 IBM Tivoli Directory Server 6.2 iFix 44 IBM Tivoli Directory Server 6.1 iFix 68 IBM Tivoli Directory Server 6.0 iFix 75 IBM Security Directory Server 6.4 iFix 2 IBM Security Directory Server 6.3.1 iFix 11

IBM Security Directory Server CVE-2015-1975 Remote Security Bypass Vulnerability

IBM Security Directory Server is prone to a security-bypass vulnerability.

Successful exploits may allow attackers to bypass certain security restrictions and gain unauthorized access to resources.

The following products are affected:

IBM Tivoli Directory Server 6.0, 6.1, 6.2, and 6.3
IBM Security Directory Server 6.3.1, and 6.4

IBM Security Directory Server CVE-2015-1975 Remote Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Security Directory Server CVE-2015-1975 Remote Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Security Directory Server CVE-2015-1975 Remote Security Bypass Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: Multiple Vulnerabilities fixed in IBM Security Directory Serv (IBM)