« Volver al listado

CVE-2015-1976

Estado: ModificadaMedia (5.5)—

IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

IBM — Security Directory ServerIBM — Tivoli Directory Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-1976",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "IBM Corporation",
          "product": "Directory Server",
          "versions": [
            {
              "status": "affected",
              "version": "6.1"
            },
            {
              "status": "affected",
              "version": "6.2"
            },
            {
              "status": "affected",
              "version": "6.3"
            },
            {
              "status": "affected",
              "version": "6.3.1"
            },
            {
              "status": "affected",
              "version": "6.0"
            },
            {
              "status": "affected",
              "version": "6.4"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-02-08T22:59:00.150",
  "references": [
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21980585",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/90526",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21980585",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/90526",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash."
    },
    {
      "lang": "es",
      "value": "IBM Security Directory Server podría permitir a un usuario autenticado ejecutar comandos en la herramienta de administración web que causaría la caída de la herramienta."
    }
  ],
  "lastModified": "2026-06-17T00:23:19.457",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:security_directory_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "45BCC2A7-717C-48ED-A18D-D53DB5C5494C",
              "versionEndIncluding": "6.3.1.15",
              "versionStartIncluding": "6.3.0.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_directory_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FED8B510-A1AD-4D44-A1A6-BFB598A7B01D",
              "versionEndIncluding": "6.4.0.6",
              "versionStartIncluding": "6.4.0.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "373090C2-BA5E-4BAA-AFB0-A8177C3A0D91",
              "versionEndIncluding": "6.0.0.77",
              "versionStartIncluding": "6.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "613173B1-55AA-4847-8874-A8A3C7478B7A",
              "versionEndIncluding": "6.1.0.72",
              "versionStartIncluding": "6.1.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B901486-F601-4CB5-827A-88EF84D62FAC",
              "versionEndIncluding": "6.2.0.48",
              "versionStartIncluding": "6.2.0.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82CE5FEE-59BA-4618-9E6B-A85C99E6C31B",
              "versionEndIncluding": "6.3.0.41",
              "versionStartIncluding": "6.3.0.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}