Vulnerabilities > CVE-2015-7461 - Resource Management Errors vulnerability in IBM Connections

CVSS 4.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

low complexity

ibm

CWE-399

NVD

Published: 2018-03-20

Updated: 2018-04-12

Summary

XML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote authenticated users to cause a denial of service (memory consumption) via crafted XML data. IBM X-Force ID: 108357.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Connections 1.0.0.0 IBM Connections 1.0.1.0 IBM Connections 1.0.2.0 IBM Connections 2.0.0.0 IBM Connections 2.0.1.0 IBM Connections 2.0.1.1 IBM Connections 2.5.0.0 IBM Connections 2.5.0.1 IBM Connections 2.5.0.2 IBM Connections 2.5.0.3 IBM Connections 3.0.0.0 IBM Connections 3.0.1.0 IBM Connections 3.0.1.1 IBM Connections 4.0.0.0 IBM Connections 4.5.0.0 IBM Connections 5.0.0.0	16

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References