Description
IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka 6.0.0.8-TIV-ITDS-IF0009), 6.1 before 6.1.0.40 (aka 6.1.0.5-TIV-ITDS-IF0003), 6.2 before 6.2.0.16 (aka 6.2.0.3-TIV-ITDS-IF0002), and 6.3 before 6.3.0.3 (aka 6.3.0.0-TIV-ITDS-IF0003) does not properly handle the ibm-auditAttributesOnGroupEvalOp setting for auditing of extended operations, which might allow attackers to obtain sensitive information by reading the audit log.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.ibm.com/support/docview.wss?uid=swg24029659 ↗
- http://secunia.com/advisories/44184 ↗
- http://www.ibm.com/support/docview.wss?uid=swg1IO14025 ↗
- http://www.ibm.com/support/docview.wss?uid=swg1IO14044 ↗
- http://www.ibm.com/support/docview.wss?uid=swg24029660 ↗
- http://www.ibm.com/support/docview.wss?uid=swg1IO14023 ↗
- http://www.ibm.com/support/docview.wss?uid=swg1IO14043 ↗
- http://www.ibm.com/support/docview.wss?uid=swg24029672 ↗
- http://www.ibm.com/support/docview.wss?uid=swg24029661 ↗
- http://www.ibm.com/support/docview.wss?uid=swg1IO14028 ↗
- http://securitytracker.com/id?1025358 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66712 ↗
- http://www.ibm.com/support/docview.wss?uid=swg21496086 ↗
- http://www.ibm.com/support/docview.wss?uid=swg24029663 ↗