CVE-2015-2019

IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not prevent caching of documents retrieved in SSL sessions, which allows physically proximate attackers to obtain sensitive information by leveraging an unattended workstation.

• CWE-17

• http://www-01.ibm.com/support/docview.wss?uid=swg21960659Patch, Vendor Advisory
• http://www.securityfocus.com/bid/75437Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032734Third Party Advisory, VDB Entry
• http://www-01.ibm.com/support/docview.wss?uid=swg21960659Patch, Vendor Advisory
• http://www.securityfocus.com/bid/75437Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032734Third Party Advisory, VDB Entry

Published

Jun 28, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2013IBM WebSphere MQ 7.0.1 before 7.0.1.13 allows remote attacke…
• CVE-2015-2014Open redirect vulnerability in the web server in IBM Domino …
• CVE-2015-2015Cross-site scripting (XSS) vulnerability in pubnames.ntf (ak…
• CVE-2015-2016Unspecified vulnerability in IBM QRadar SIEM 7.1 MR2 before …
• CVE-2015-2017CRLF injection vulnerability in IBM WebSphere Application Se…
• CVE-2015-2018IBM Integration Bus 9 and 10 before 10.0.0.1 and WebSphere M…
• CVE-2015-2020The MyScript SDK before 1.3 for Android might allow attacker…
• CVE-2015-2023Buffer overflow in IBM i Access 7.1 on Windows allows local …
• CVE-2015-2025IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 b…
• CVE-2015-2026Cross-site request forgery (CSRF) vulnerability in IBM WebSp…
• CVE-2015-2027IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 b…
• CVE-2015-2028CRLF injection vulnerability in IBM WebSphere eXtreme Scale …