CVE-2015-5001: Medium severity ibm websphere portal vulnerability

Published Dec 21, 2015

Updated

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and 8.5.0 before CF08 allows remote authenticated users to cause a denial of service (memory consumption) via a crafted document.

Affected Software

17 affected components

IBM WebSphere Portal=6.1.0.0

IBM WebSphere Portal=6.1.0.1

IBM WebSphere Portal=6.1.0.2

IBM WebSphere Portal=6.1.0.3

IBM WebSphere Portal=6.1.0.4

IBM WebSphere Portal=6.1.0.5

IBM WebSphere Portal=6.1.0.6

IBM WebSphere Portal=6.1.5.0

IBM WebSphere Portal=6.1.5.1

IBM WebSphere Portal=6.1.5.2

IBM WebSphere Portal=6.1.5.3

IBM WebSphere Portal=7.0.0.0

IBM WebSphere Portal=7.0.0.1

IBM WebSphere Portal=7.0.0.2

IBM WebSphere Portal=8.0.0.0

IBM WebSphere Portal=8.0.0.1

IBM WebSphere Portal=8.5.0.0

Event History

Dec 21, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-5001?

CVE-2015-5001 has a medium severity rating as it allows denial of service due to memory consumption.

How do I fix CVE-2015-5001?

To fix CVE-2015-5001, users should upgrade to the respective patched version of IBM WebSphere Portal.

Who is affected by CVE-2015-5001?

CVE-2015-5001 affects IBM WebSphere Portal versions 6.1.0 through 8.5.0 before specific fix packs.

What type of vulnerability is CVE-2015-5001?

CVE-2015-5001 is a denial of service vulnerability that can be exploited by authenticated users.

Can CVE-2015-5001 be exploited remotely?

Yes, CVE-2015-5001 can be exploited remotely by authenticated users through crafted documents.