PT-2015-1331 · Ibm · Ibm Websphere Portal

Publicado 2015-05-24 · Atualizado 2015-05-26 · CVE-2015-1899

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 8.5 through CF05

Description The issue is related to resource management errors in the IBM WebSphere Portal server application interface. It allows remote attackers to cause a denial of service, specifically CPU consumption, via unspecified vectors. This can be exploited by a remote attacker to disrupt service.

Recommendations For IBM WebSphere Portal versions 8.5 through CF05, consider restricting resource-intensive operations to minimize the risk of CPU consumption until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2015-10419

CVE-2015-1899

Produtos afetados

Ibm Websphere Portal

Referências · 5

• http://www-01.ibm.com/support/docview.wss?uid=swg21700066 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-10419 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-1899 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1899 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI37139 · Aviso do Fabricante