Security Advisory

CVE-2011-2758

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-07-17 20:00:00
Last updated 2024-09-16 22:08:50
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a crafted URL.