CVE ID:	CVE-2011-1820
Description:	IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka 6.0.0.8-TIV-ITDS-IF0009), 6.1 before 6.1.0.40 (aka 6.1.0.5-TIV-ITDS-IF0003), 6.2 before 6.2.0.16 (aka 6.2.0.3-TIV- ITDS-IF0002), and 6.3 before 6.3.0.3 (aka 6.3.0.0-TIV-ITDS-IF0003) does not properly handle the ibm-auditAttributesOnGroupEvalOp setting for auditing of extended operations, which might allow attackers to obtain sensitive information by reading the audit log.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1820 AIX APAR: IO14023 http://www.ibm.com/support/docview.wss?uid=swg1IO14023 AIX APAR: IO14025 http://www.ibm.com/support/docview.wss?uid=swg1IO14025 AIX APAR: IO14028 http://www.ibm.com/support/docview.wss?uid=swg1IO14028 AIX APAR: IO14043 http://www.ibm.com/support/docview.wss?uid=swg1IO14043 AIX APAR: IO14044 http://www.ibm.com/support/docview.wss?uid=swg1IO14044 http://securitytracker.com/id?1025358 http://secunia.com/advisories/44184 XForce ISS Database: ibm-tds-proxyserver-info-disclosure(66712) https://exchange.xforce.ibmcloud.com/vulnerabilities/66712