CVE-2015-1977: IBM Security Directory Server

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server (ISDS) before 6.3.1.18-ISS-ISDS-IF0018 and 6.4.x before 6.4.0.9-ISS-ISDS-IF0009 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.

Affected products

• IBM Security Directory Server: version 6.4.0 only; version 6.4.0.0 only; version 6.4.0.1 only; version 6.4.0.2 only; version 6.4.0.3 only; version 6.4.0.4 only; …
• IBM Tivoli Directory Server: version 6.2.0 only; version 6.2.0.0 only; version 6.2.0.1 only; version 6.2.0.2 only; version 6.2.0.3 only; version 6.2.0.4 only; …

Published 2016-07-15. Last modified 2026-06-17.