CVE-2008-5257

EPSS 0.76%
Veröffentlicht 27.11.2008 00:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

webseald in WebSEAL 6.0.0.17 in IBM Tivoli Access Manager for e-business allows remote attackers to cause a denial of service (crash or hang) via HTTP requests, as demonstrated by a McAfee vulnerability scan.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Tivoli Access Manager For E-business Version6.0.0.17

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.76%	0.71

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/32755

Patch

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28611

Patch

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ37270

http://www.securityfocus.com/bid/32461

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/46821

https://nvd.nist.gov/vuln/detail/CVE-2008-5257

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-5257

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-5257

EUVD