CVE-2011-2759

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-07-17 · updated 2026-06-16
Weakness: CWE-200

Description

The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Affected products

IBM Tivoli Directory Server: 6.2, 6.2.0.0, 6.2.0.1, 6.2.0.2

References

http://www.ibm.com/support/docview.wss?crawler=1&uid=swg1IO14165
http://www.ibm.com/support/docview.wss?uid=swg1IO14165
http://www.ibm.com/support/docview.wss?uid=swg24030320
https://exchange.xforce.ibmcloud.com/vulnerabilities/68585
http://www.ibm.com/support/docview.wss?crawler=1&uid=swg1IO14165
http://www.ibm.com/support/docview.wss?uid=swg1IO14165
http://www.ibm.com/support/docview.wss?uid=swg24030320
https://exchange.xforce.ibmcloud.com/vulnerabilities/68585

Get alerted when CVE-2011-2759 or the next vulnerability affects your stack