PT-2018-14197 · Ibm · Ibm Api Connect

Publicado 2018-11-20 · Atualizado 2020-08-24 · CVE-2018-1779

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 2018.1 through 2018.3.7

Description The issue allows an unauthenticated attacker to cause a denial of service due to not setting limits on JSON payload size.

Recommendations For versions 2018.1 through 2018.3.7, consider setting limits on JSON payload size to prevent denial of service attacks. As a temporary workaround, restrict access to the API to minimize the risk of exploitation.

Correção

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2018-1779

Produtos afetados

Ibm Api Connect

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-1779 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1779 · Aviso do Fabricante
• http://securityfocus.com/bid/105991 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/148802 · Aviso do Fabricante
• https://ibm.com/support/docview.wss?uid=ibm10733851 · Aviso do Fabricante