First published: Sat Oct 03 2015(Updated: )
IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to cause a denial of service (maintenance-mode transition and data-storage outage) by calling the System Administration Mode function.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM OpenPages | =6.2.0.0 | |
IBM OpenPages | =6.2.1.0 | |
IBM OpenPages | =6.2.1.1 | |
IBM OpenPages | =7.0.0.0 | |
IBM OpenPages | =7.1.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0142 is rated as a medium severity vulnerability, as it allows remote authenticated users to cause a denial of service.
To fix CVE-2015-0142, upgrade to IBM OpenPages GRC Platform version 6.2 IF7, 6.2.1.1 IF5, 7.0 FP4, or 7.1 FP1 or later.
CVE-2015-0142 affects users of IBM OpenPages GRC Platform versions 6.2.0.0, 6.2.1.0, 6.2.1.1, 7.0.0.0, and 7.1.0.0.
The impact of CVE-2015-0142 is that it can cause a denial of service, leading to maintenance-mode transition and data-storage outages.
Yes, CVE-2015-0142 is exploitable remotely by authenticated users.