CVE-2011-1394: Medium severity ibm maximo asset management vulnerability
IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allow remote attackers to cause a denial of service (memory consumption) by establishing many UI sessions within one HTTP session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1394?
CVE-2011-1394 has been classified with high severity due to its potential impact on vulnerable IBM software.
How do I fix CVE-2011-1394?
To fix CVE-2011-1394, users should apply the latest patches or updates provided by IBM for the affected software versions.
What IBM products are affected by CVE-2011-1394?
CVE-2011-1394 affects various versions of IBM Maximo Asset Management, IBM Tivoli Asset Management for IT, IBM Tivoli Service Request Manager, and IBM Tivoli Change and Configuration Management Database.
Can CVE-2011-1394 be exploited remotely?
Yes, CVE-2011-1394 can be exploited remotely if the vulnerable software is exposed to the internet.
Is there a workaround for CVE-2011-1394 if I cannot apply patches?
While patching is the recommended solution, temporarily restricting access to the affected services can serve as a workaround until a patch is applied.