CVE-2019-4562

IBM Security Directory Server 6.4.0 stores sensitive information in URLs

Low · published February 4, 2020

CVSS v3.0
3.7
EPSS
1%
Percentile
61.9
In the wild
Unconfirmed
What it is

IBM Security Directory Server 6.4.0 stores sensitive information in URLs. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history. IBM X-Force ID: 166623.

The record
Technical detail
CVSS v3.0
3.7 · LOW
Vector
CVSS:3.0/C:L/UI:N/PR:N/S:U/AV:N/AC:H/I:N/A:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00981 · 61.9th percentile
Published
2020-02-04T16:45Z
EPSS history
Timeline
  • 04 FEB 16:45Z
    IBM Security Directory Server 6.4.0 stores sensitive information in URLs
    cvelistv5