CVE-2011-2682

IBM Rational DOORS Web Access 1.4.x < 1.4.0.4 - Authenticated Denial of Service via New User Login

Title source: llm
STIX 2.1

Description

The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login.

References (4)

Core 4
Core References
Various Sources x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg27020404
Exploit vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PM38477
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/48520
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/68484

Scores

EPSS 0.0117
EPSS Percentile 64.3%

Details

CWE
CWE-399
Status published
Products (4)
ibm/rational_doors_web_access 1.4
ibm/rational_doors_web_access 1.4.0.1
ibm/rational_doors_web_access 1.4.0.2
ibm/rational_doors_web_access 1.4.0.3
Published Jul 07, 2011
Tracked Since Feb 18, 2026