CVE-2011-1820: Infoleak
IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka 6.0.0.8-TIV-ITDS-IF0009), 6.1 before 6.1.0.40 (aka 6.1.0.5-TIV-ITDS-IF0003), 6.2 before 6.2.0.16 (aka 6.2.0.3-TIV-ITDS-IF0002), and 6.3 before 6.3.0.3 (aka 6.3.0.0-TIV-ITDS-IF0003) does not properly handle the ibm-auditAttributesOnGroupEvalOp setting for auditing of extended operations, which might allow attackers to obtain sensitive information by reading the audit log.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1820?
CVE-2011-1820 has a medium severity rating, indicating that it could be exploited to cause moderate impact.
How do I fix CVE-2011-1820?
To address CVE-2011-1820, you should upgrade to a fixed version of IBM Tivoli Directory Server as specified in the vendor's security advisory.
Which versions of IBM Tivoli Directory Server are affected by CVE-2011-1820?
CVE-2011-1820 affects multiple versions including 5.2.0 before 5.2.0.5-TIV-ITDS-IF0010 and various versions of 6.0, 6.1, 6.2, and 6.3.
What type of vulnerability is CVE-2011-1820?
CVE-2011-1820 is characterized as a security vulnerability in the IBM Tivoli Directory Server that involves improper handling of certain operations.
Is CVE-2011-1820 remotely exploitable?
Yes, CVE-2011-1820 can be exploited remotely, allowing attackers to potentially compromise vulnerable systems.