PT-2014-6106 · Ibm · Ibm Websphere Application Server

Published 2014-08-22 · Updated 2017-08-29 · CVE-2014-4764

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server (WAS) versions 8.0.x before 8.0.0.10 IBM WebSphere Application Server (WAS) versions 8.5.x before 8.5.5.3

Description The issue allows remote attackers to cause a denial of service, resulting in a Load Balancer crash, when the Load Balancer for IPv4 Dispatcher is enabled. The attack vectors are not specified.

Recommendations For IBM WebSphere Application Server (WAS) versions 8.0.x before 8.0.0.10, update to version 8.0.0.10 or later. For IBM WebSphere Application Server (WAS) versions 8.5.x before 8.5.5.3, update to version 8.5.5.3 or later.

Fix

Related Identifiers

CVE-2014-4764

Affected Products

Ibm Websphere Application Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2014-4764 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI21189 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21681249 · Vendor Advisory
• http://securityfocus.com/bid/69301 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4764 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94723 · Note