CVE-2014-0963 The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attac...
HighCVSS 7.1
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attackers to cause a denial of service (infinite loop) via crafted SSL messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm security access manager for web software | = 7.0 | No fix listed |
| ibm security access manager for web software | = 8.0 | No fix listed |
| ibm security access manager for web appliance | = 7.0 | No fix listed |
| ibm security access manager for web appliance | = 8.0 | No fix listed |
References
- 58845 third-party-advisory
- 59245 third-party-advisory
- 59249 third-party-advisory
- IV59660 vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com patch vendor-advisory
- www-01.ibm.com patch vendor-advisory
- www-304.ibm.com
- www.ibm.com
- 67238 vdb-entry
- 1030707 vdb-entry
- ibm-gskit-cve20140963-dos(92844) vdb-entry