VULNERABILITY INTELLIGENCE
CVE-2008-7289
CVSS score4 MEDIUM
EPSS probability0.88%
CISA KEVNot currently listed
Published2011-04-21
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P
Description
IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 does not properly handle the simultaneous changing of multiple passwords, which makes it easier for remote authenticated users to cause a denial of service (DB2 daemon deadlock) by making password changes that trigger updates to a DB2 password-history table.
Weakness classification
- CWE-20: Improper Input Validation