← Back

CVE-2011-1394

nvd nist
Published: Mar 13, 2012Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allow remote attackers to cause a denial of service (memory consumption) by establishing many UI sessions within one HTTP session.

Affected (15)

6 products
Maximo Asset Management
Tivoli Asset Management For It
Trivoli Service Request Manager
Maximo Service Desk
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Version 6.2
Version 7.1
Version 7.5
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Version 6.2
Version 7.1
Version 7.5
Configuration C
3 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Version 6.2
Version 7.1
Version 7.2
Configuration D
2 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Version 7.1
Version 7.2
Configuration E
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 6.2
Configuration F
3 vulnerable

Related CWEs

References (12)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.