CWE Code: 74
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Summary: the web administration tool in ibm tivoli security directory server 6.0 before ifix 75, 6.1 before ifix 68, 6.2 before ifix 44, and 6.3 before ifix 37 and ibm security directory server 6.3.1 before ifix 11 and 6.4 before ifix 2 allows local users to gain privileges via vectors related to argument injection. ibm x-force id: 103694.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-04-03
Last Modified Date: 2018-05-10