PT-2011-1279 · Ibm · Ibm Lotus Quickr
Published
2011-03-22
·
Updated
2011-03-24
·
CVE-2008-7286
CVSS v2.0
3.5
Low
| Vector | AV:N/AC:M/Au:S/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
IBM Lotus Quickr version 8.1 before 8.1.0.2
Description
The issue arises from improper handling of URLs that request images, allowing remote authenticated users to cause a denial of service by crashing the daemon. This can be achieved through a request to the
resources.nsf endpoint.Recommendations
For IBM Lotus Quickr version 8.1 before 8.1.0.2, update to version 8.1.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the
resources.nsf endpoint to minimize the risk of exploitation.Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Lotus Quickr