CVE-2014-0963

IBM Security Access Manager for Web 7.0-8.0 - Denial of Service via Reverse Proxy SSL Message Handling

Title source: llm
STIX 2.1

Description

The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attackers to cause a denial of service (infinite loop) via crafted SSL messages.

References (12)

Core 12
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59249
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/92844
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21676092
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/58845
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IV59660
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59245
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21672192
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1030707
Various Sources x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21675496
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/67238
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21676091

Scores

EPSS 0.0308
EPSS Percentile 86.3%

Details

CWE
CWE-399
Status published
Products (4)
ibm/security_access_manager_for_web_appliance 7.0
ibm/security_access_manager_for_web_appliance 8.0
ibm/security_access_manager_for_web_software 7.0
ibm/security_access_manager_for_web_software 8.0
Published May 08, 2014
Tracked Since Feb 18, 2026