CVE-2015-2019: IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before...

Security readout for executives and security teams

This is an information disclosure issue in IBM Tivoli Security Directory Server. Affected releases failed to prevent cached copies of documents viewed over SSL sessions. If a workstation is left unattended, someone nearby could recover sensitive content from cache. The bundle provides no CVSS score and no active exploitation evidence. Exposure is most likely in legacy IBM Tivoli Security Directory Server 6.x environments where users access sensitive documents over SSL from shared, unmanaged, or physically accessible workstations. Internet exposure is not the key condition described in the sources. Prioritize this for legacy IBM directory environments handling sensitive data, especially where shared or physically accessible workstations are used. It is not presented as remotely exploitable, but it can expose confidential information if workstation controls are weak. Mitigation focus: Identify any IBM Tivoli Security Directory Server 6.x deployments.; Apply the IBM iFix level named for each affected version.; Check IBM support guidance for version-specific remediation details..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.