PT-2014-4804 · Hewlett Packard+1 · Hp Icewall Identity Manager+2

Publicado 2014-04-05 · Atualizado 2019-10-09 · CVE-2014-2600

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions HP IceWall Identity Manager versions 4.0 through 4.0 SP1 HP IceWall Identity Manager version 5.0 HP IceWall SSO version 10.0

Description The issue affects HP IceWall Identity Manager and HP IceWall SSO when Apache Commons FileUpload is used, allowing remote authenticated users to cause a denial of service via unknown vectors.

Recommendations For HP IceWall Identity Manager versions 4.0 through 4.0 SP1, update to a version that does not use the vulnerable Apache Commons FileUpload. For HP IceWall Identity Manager version 5.0, update to a version that does not use the vulnerable Apache Commons FileUpload. For HP IceWall SSO version 10.0, update to a version that does not use the vulnerable Apache Commons FileUpload.

Correção

Identificadores relacionados

CVE-2014-2600

Produtos afetados

Apache Commons Fileupload

Hp Icewall Identity Manager

Hp Icewall Sso

Referências · 2

• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04214298 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-2600 · Nota de Segurança