PT-2014-4804 · Hewlett Packard+1 · Hp Icewall Identity Manager+2

Published 2014-04-05 · Updated 2019-10-09 · CVE-2014-2600

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions HP IceWall Identity Manager versions 4.0 through 4.0 SP1 HP IceWall Identity Manager version 5.0 HP IceWall SSO version 10.0

Description The issue affects HP IceWall Identity Manager and HP IceWall SSO when Apache Commons FileUpload is used, allowing remote authenticated users to cause a denial of service via unknown vectors.

Recommendations For HP IceWall Identity Manager versions 4.0 through 4.0 SP1, update to a version that does not use the vulnerable Apache Commons FileUpload. For HP IceWall Identity Manager version 5.0, update to a version that does not use the vulnerable Apache Commons FileUpload. For HP IceWall SSO version 10.0, update to a version that does not use the vulnerable Apache Commons FileUpload.

Fix

Related Identifiers

CVE-2014-2600

Affected Products

Apache Commons Fileupload

Hp Icewall Identity Manager

Hp Icewall Sso

References · 2

• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04214298 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2600 · Security Note