Vulnerability Details CVE-2011-1394
IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allow remote attackers to cause a denial of service (memory consumption) by establishing many UI sessions within one HTTP session.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 80.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://secunia.com/advisories/48299
- http://secunia.com/advisories/48305
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV09157
- http://www.ibm.com/support/docview.wss?uid=swg21584666
- http://www.securityfocus.com/bid/52333
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71985
- http://secunia.com/advisories/48299
- http://secunia.com/advisories/48305
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV09157
- http://www.ibm.com/support/docview.wss?uid=swg21584666
- http://www.securityfocus.com/bid/52333
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71985
Products affected by CVE-2011-1394
-
cpe:2.3:a:ibm:maximo_asset_management:6.2
-
cpe:2.3:a:ibm:maximo_asset_management:7.1
-
cpe:2.3:a:ibm:maximo_asset_management:7.5
-
cpe:2.3:a:ibm:maximo_asset_management_essentials:6.2
-
cpe:2.3:a:ibm:maximo_asset_management_essentials:7.1
-
cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5
-
cpe:2.3:a:ibm:maximo_service_desk:6.2
-
cpe:2.3:a:ibm:tivoli_asset_management_for_it:6.2
-
cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.1
-
cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2
-
cpe:2.3:a:ibm:tivoli_change_and_configuration_management_database:6.2
-
cpe:2.3:a:ibm:tivoli_change_and_configuration_management_database:7.1
-
cpe:2.3:a:ibm:tivoli_change_and_configuration_management_database:7.2
-
cpe:2.3:a:ibm:trivoli_service_request_manager:7.1
-
cpe:2.3:a:ibm:trivoli_service_request_manager:7.2