IBM49C34992AFAE81FC539634C0829A132ADB4D8EDC35A9EBE2DCCAA56075DE4BB9Security Bulletin: IBM InfoSphere Information Server is vulnerable to a denial of service vulnerability in Angular.js
0.008 Low
EPSS
Percentile
81.8%
Summary
A denial of service vulnerability in Angular.js used by IBM InfoSphere Information Analyzer was addressed.
Vulnerability Details
CVEID:CVE-2016-4055
**DESCRIPTION:**The Node.js moment module is vulnerable to a denial of service, caused by an error in the regular expression implementation. An attacker could exploit this vulnerability using a regular expression to cause the application to hang.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/112574 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| InfoSphere Information Server | 11.7 |
Remediation/Fixes
| Product | VRMF | APAR | Remediation/First Fix |
|---|---|---|---|
| InfoSphere Information Analyzer, Information Server on Cloud | 11.7 | JR63476 | |
| --Apply InfoSphere Information Server version 11.7.1.0 | |||
| --Apply InfoSphere Information Server version 11.7.1.0 Fix Pack 1 | |||
| --Apply InfoSphere Information Server 11.7.1.1 Service Pack 2 |
For Red Hat 8 installations contact IBM Customer support
Contact Technical Support:
In the United States and Canada dial 1-800-IBM-SERV
View the support contacts for other countries outside of the United States.
Electronically open a Service Request with Information Server Technical Support.
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm infosphere information server | eq | any |
Related
0.008 Low
EPSS
Percentile
81.8%