CVE-2015-1974: The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68,...

Security readout for executives and security teams

This CVE affects the web administration tool for IBM Tivoli Security Directory Server. An already-authenticated remote user could bypass intended command restrictions, meaning trusted access could be abused beyond expected limits. The public record does not provide CVSS, CWE, or technical vectors. Exposure is limited to deployments running the IBM Tivoli Security Directory Server web administration tool at affected pre-iFix versions. The vulnerability requires authenticated remote access, so internet-facing or broadly accessible admin consoles increase concern. Prioritize if this product is still running, especially where web administration is reachable beyond a tightly controlled admin network. The age of the CVE lowers novelty, but legacy identity infrastructure can remain business-critical. Mitigation focus: Confirm whether IBM Tivoli Security Directory Server is still deployed.; Apply the IBM fixed iFix level or a later supported update.; Restrict web administration access to trusted management networks and users..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.