PT-2011-3661 · Ibm · Ibm Websphere Portal

Publicado 2011-05-26 · Atualizado 2017-08-29 · CVE-2011-2173

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 6.0.1.7, 7.0.0.1 before CF002

Description The issue allows remote authenticated users to cause a denial of service, specifically memory consumption, via requests. This is due to the implementation of OutputMediator objects.

Recommendations For IBM WebSphere Portal version 6.0.1.7, apply the necessary fixes or updates to address the issue. For IBM WebSphere Portal version 7.0.0.1, apply Cumulative Fix 2 (CF002) or later to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2011-2173

Produtos afetados

Ibm Websphere Portal

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/67687 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2173 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=swg24029452 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM33432 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2173 · Nota