PT-2004-1771 · Ibm · Websphere Edge Server

Publicado 2004-07-13 · Atualizado 2017-07-11 · CVE-2004-0684

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions WebSphere Edge Server version 5.02

Description The issue allows remote attackers to cause a denial of service via an HTTP GET request without any parameters when the JunctionRewrite directive is enabled in the WebSphere Edge Component Caching Proxy.

Recommendations For WebSphere Edge Server version 5.02, consider disabling the JunctionRewrite directive as a temporary workaround to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-0684

Produtos afetados

Websphere Edge Server

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2004-0684 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16607 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0684 · Nota
• http://marc.info/?l=bugtraq&m=108938997528245&w=2 · Nota
• http://cybsec.com/vuln/IBM-WebSphere-Edge-Server-DOS.pdf · Nota