CVE-2019-4562

published 2020-02-04

CVE-2019-4562: IBM Security Directory Server 6.4.0 stores sensitive information in URLs. This may lead to information disclosure if unauthorized parties have access to the…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

IBM Security Directory Server 6.4.0 stores sensitive information in URLs. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history. IBM X-Force ID: 166623.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	security_directory_server	—	—
ibm	security_directory_server	>= 6.4.0.0 < 6.4.0.20	6.4.0.20

CWE-200