CVE-2021-39016

Опубликовано: 14 июл. 2022

Источник: nvd

CVSS3: 4.3

EPSS Низкий

Описание

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the software to transmit more traffic than should be allowed for that actor. IBM X-Force ID: 213722.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/213722
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6603335
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/213722
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6603335
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_publishing:6.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_publishing:6.0.6.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_publishing:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:engineering_lifecycle_optimization_publishing:7.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:engineering_lifecycle_optimization_publishing:7.0.2:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00145

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-g28g-9v8x-765w

CVSS3: 4.3

github

больше 3 лет назад

EPSS

Процентиль: 35%

0.00145

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

NVD-CWE-noinfo