PT-2011-1279 · Ibm · Ibm Lotus Quickr

Publicado

2011-03-22

·

Atualizado

2011-03-24

·

CVE-2008-7286

CVSS v2.0

3.5

Baixa

VetorAV:N/AC:M/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions IBM Lotus Quickr version 8.1 before 8.1.0.2
Description The issue arises from improper handling of URLs that request images, allowing remote authenticated users to cause a denial of service by crashing the daemon. This can be achieved through a request to the resources.nsf endpoint.
Recommendations For IBM Lotus Quickr version 8.1 before 8.1.0.2, update to version 8.1.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the resources.nsf endpoint to minimize the risk of exploitation.

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-7286

Produtos afetados

Ibm Lotus Quickr