Vulnerabilities > CVE-2014-4809 - Remote Denial of Service vulnerability in IBM products

CVSS 7.1 - HIGH

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

ibm

NVD

Published: 2014-10-03

Updated: 2017-08-29

Summary

The WebSEAL component in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, when e-community SSO is enabled, allows remote attackers to cause a denial of service (component hang) via unspecified vectors.

Vulnerable Configurations

Part	Description	Count
OS	Ibm IBM Security Access Manager FOR WEB 8.0 Firmware 8.0.0.2 IBM Security Access Manager FOR WEB 8.0 Firmware 8.0.0.3 IBM Security Access Manager FOR WEB 8.0 Firmware 8.0.0.4 IBM Security Access Manager FOR WEB 7.0 Firmware 7.0.0.0 IBM Security Access Manager FOR WEB 7.0 Firmware 7.0.0.1 IBM Security Access Manager FOR WEB 7.0 Firmware 7.0.0.2 IBM Security Access Manager FOR WEB 7.0 Firmware 7.0.0.3 IBM Security Access Manager FOR WEB 7.0 Firmware 7.0.0.4 IBM Security Access Manager FOR WEB 7.0 Firmware 7.0.0.5 IBM Security Access Manager FOR WEB 7.0 Firmware 7.0.0.6 IBM Security Access Manager FOR WEB 7.0 Firmware 7.0.0.7 IBM Security Access Manager FOR WEB 7.0 Firmware 7.0.0.8	12
Hardware	Ibm IBM Security Access Manager FOR WEB Appliance 8.0 IBM Security Access Manager FOR WEB Appliance 7.0	2

Summary

Vulnerable Configurations

References