First published: Thu Jul 07 2011(Updated: )
The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Rational DOORS Web Access | =1.4.0.1 | |
IBM Rational DOORS Web Access | =1.4 | |
IBM Rational DOORS Web Access | =1.4.0.3 | |
IBM Rational DOORS Web Access | =1.4.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-2682 has a severity rating that indicates it can cause denial of service due to license consumption.
To mitigate CVE-2011-2682, it is recommended to upgrade to IBM Rational DOORS Web Access version 1.4.0.4 or later.
CVE-2011-2682 affects remote authenticated users of IBM Rational DOORS Web Access versions 1.4.0.1 through 1.4.0.3.
CVE-2011-2682 is a denial of service vulnerability related to the Login component in IBM Rational DOORS Web Access.
No, CVE-2011-2682 requires user authentication to attempt exploitation.