CVE-2011-2682: Medium severity ibm rational doors vulnerability

Published Jul 7, 2011

Updated

The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login.

Affected Software

4 affected components

IBM Rational DOORS Web Access=1.4

IBM Rational DOORS Web Access=1.4.0.1

IBM Rational DOORS Web Access=1.4.0.2

IBM Rational DOORS Web Access=1.4.0.3

Event History

Jul 7, 2011

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2682?

CVE-2011-2682 has a severity rating that indicates it can cause denial of service due to license consumption.

How do I fix CVE-2011-2682?

To mitigate CVE-2011-2682, it is recommended to upgrade to IBM Rational DOORS Web Access version 1.4.0.4 or later.

Who is affected by CVE-2011-2682?

CVE-2011-2682 affects remote authenticated users of IBM Rational DOORS Web Access versions 1.4.0.1 through 1.4.0.3.

What type of vulnerability is CVE-2011-2682?

CVE-2011-2682 is a denial of service vulnerability related to the Login component in IBM Rational DOORS Web Access.

Can CVE-2011-2682 be exploited without authentication?

No, CVE-2011-2682 requires user authentication to attempt exploitation.