PT-2014-6106 · Ibm · Ibm Websphere Application Server

Publicado 2014-08-22 · Atualizado 2017-08-29 · CVE-2014-4764

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server (WAS) versions 8.0.x before 8.0.0.10 IBM WebSphere Application Server (WAS) versions 8.5.x before 8.5.5.3

Description The issue allows remote attackers to cause a denial of service, resulting in a Load Balancer crash, when the Load Balancer for IPv4 Dispatcher is enabled. The attack vectors are not specified.

Recommendations For IBM WebSphere Application Server (WAS) versions 8.0.x before 8.0.0.10, update to version 8.0.0.10 or later. For IBM WebSphere Application Server (WAS) versions 8.5.x before 8.5.5.3, update to version 8.5.5.3 or later.

Correção

Identificadores relacionados

CVE-2014-4764

Produtos afetados

Ibm Websphere Application Server

Referências · 6

• http://securityfocus.com/bid/69301 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4764 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4764 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94723 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI21189 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21681249 · Aviso do Fabricante