CVE-2010-4593

Name of the Vulnerable Software and Affected Versions IBM Lotus Mobile Connect versions prior to 6.1.4

Description The issue is related to the Connection Manager in IBM Lotus Mobile Connect, which does not properly maintain a certain reference count. This allows remote authenticated users to cause a denial of service, specifically IP address exhaustion, by making invalid attempts to establish sessions with the same VPN ID from multiple devices.

Recommendations For versions prior to 6.1.4, update to version 6.1.4 or later to resolve the issue.