CVE-2011-2759

{"id": "CVE-2011-2759", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-07-17T20:55:02.047", "references": [{"url": "http://www.ibm.com/support/docview.wss?crawler=1&uid=swg1IO14165", "source": "cve@mitre.org"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg1IO14165", "source": "cve@mitre.org"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg24030320", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68585", "source": "cve@mitre.org"}, {"url": "http://www.ibm.com/support/docview.wss?crawler=1&uid=swg1IO14165", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg1IO14165", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg24030320", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68585", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation."}, {"lang": "es", "value": "En la herramienta de administraci\u00f3n Web de IBM Tivoli Directory Server (TDS) v6.2 y anteriores a 6.2.0.3-TIV-ITDS-IF0004, La p\u00e1gina de inicio de sesi\u00f3n IDSWebApp, no tiene un atributo de autocompletar para los campos de autenticaci\u00f3n, lo que hace m\u00e1s f\u00e1cil para los atacantes remotos obtener acceso mediante el aprovechamiento de una estaci\u00f3n de trabajo sin supervisi\u00f3n."}], "lastModified": "2024-11-21T01:28:54.753", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5682108-A76B-443A-A172-7F17F54B5983"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "653551D3-88A3-4E69-A1B1-64326BEF1F18"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CBAF2E5-4931-41AF-BCDA-D769B06FB05E"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98186E56-0F75-4306-9E34-A388EA2FD6C4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}