PT-2014-3979 · Ibm · Ibm Global Security Kit+1

Published 2014-05-08 · Updated 2017-08-29 · CVE-2014-0963

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager (ISAM) for Web versions 7.0 through 7.0.0-ISS-SAM-IF0005 IBM Security Access Manager (ISAM) for Web versions 8.0 through 8.0.0.3-ISS-WGA-IF0001

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, via crafted SSL messages. This is related to the Reverse Proxy feature in IBM Global Security Kit.

Recommendations For IBM Security Access Manager (ISAM) for Web version 7.0, update to 7.0.0-ISS-SAM-IF0006 or later. For IBM Security Access Manager (ISAM) for Web version 8.0, update to 8.0.0.3-ISS-WGA-IF0002 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2014-0963

Affected Products

Ibm Global Security Kit

Ibm Security Access Manager For Web

References · 13

• http://www-01.ibm.com/support/docview.wss?uid=swg21672192 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21676091 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21676092 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV59660 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0963 · Security Note
• http://secunia.com/advisories/59245 · Note
• http://secunia.com/advisories/58845 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92844 · Note
• http://www-304.ibm.com/support/docview.wss?uid=swg21680803 · Note
• http://securitytracker.com/id/1030707 · Note
• http://secunia.com/advisories/59249 · Note
• http://securityfocus.com/bid/67238 · Note
• http://ibm.com/support/docview.wss?uid=swg21675496 · Note