CVE-2014-0921

Name of the Vulnerable Software and Affected Versions IBM MessageSight versions 1.x before 1.1.0.0-IBM-IMA-IT01015

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash and message data loss, via malformed headers during a WebSockets connection upgrade.

Recommendations For IBM MessageSight versions 1.x before 1.1.0.0-IBM-IMA-IT01015, update to version 1.1.0.0-IBM-IMA-IT01015 or later to resolve the issue. As a temporary workaround, consider restricting WebSockets connection upgrades to minimize the risk of exploitation.