PT-2015-5490
CVE-2015-1892
·
تاريخ النشر
2015-04-01
·
تاريخ التحديث
2016-08-04
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Security Access Manager for Web versions 7.0.0 through 7.0.0 FP11
IBM Security Access Manager for Web versions 8.0.0 through 8.0.1 FP0
Description
The issue concerns the Multicast DNS (mDNS) responder, which responds to unicast queries with source addresses that are not link-local. This allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets.
Recommendations
For IBM Security Access Manager for Web versions 7.0.0 through 7.0.0 FP11, update to version 7.0.0 FP12.
For IBM Security Access Manager for Web versions 8.0.0 through 8.0.1 FP0, update to version 8.0.1 FP1.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾