Lucene search

K
cve[email protected]CVE-2014-0963
HistoryMay 08, 2014 - 10:55 a.m.

CVE-2014-0963

2014-05-0810:55:03
CWE-399
web.nvd.nist.gov
58
ibm
gskit
isam
web
ssl
denial of service
security vulnerability
remote attack

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.1 Medium

AI Score

Confidence

Low

0.059 Low

EPSS

Percentile

93.5%

The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attackers to cause a denial of service (infinite loop) via crafted SSL messages.

Affected configurations

NVD
Node
ibmsecurity_access_manager_for_web_softwareMatch7.0
OR
ibmsecurity_access_manager_for_web_softwareMatch8.0
OR
ibmsecurity_access_manager_for_web_applianceMatch7.0
OR
ibmsecurity_access_manager_for_web_applianceMatch8.0

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.1 Medium

AI Score

Confidence

Low

0.059 Low

EPSS

Percentile

93.5%

Related for CVE-2014-0963