7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability in Spring Framework affects IBM Tivoli Application Dependency Discovery Manager.
CVE-ID: CVE-2018-15756
Description: Pivotal Spring Framework is vulnerable to a denial of service, caused by improper handling of range request by the ResourceHttpRequestHandler. By adding a range header with a high number of ranges, a remote attacker could exploit this vulnerability to cause a denial of service condition.
CVSS Base Score: 7.5
CVSS Temporal Score: https://exchange.xforce.ibmcloud.com/vulnerabilities/151641for more information
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
TADDM 7.3.0.3 - 7.3.0.6
There are eFixes prepared on top of each of the Fixpacks which are affected by this vulnerability. If you have no eFixes installed on the given FixPack level, go ahead and download the eFix from the links given below. However, if you have eFixes installed on a given Fixpack level, please contact support for having a custom eFix built for your eFix level.
Fix | VRMF | APAR | How to acquire fix |
---|
efix_IJ15471_FP6190313.zip
| 7.3.0.6 | None | Download eFix
efix_IJ15471_FP5180802.zip | 7.3.0.5 | None | Download eFix
efix_IJ15471_FP420171214.zip | 7.3.0.4 | None | Download eFix
efix_IJ15471_FP320160323.zip | 7.3.0.3 | None | Download eFix
Please get familiar with eFix readme in etc/<efix_name>_readme.txt
None
CPE | Name | Operator | Version |
---|---|---|---|
tivoli application dependency discovery manager | eq | 7.2.2 | |
tivoli application dependency discovery manager | eq | 7.3 |
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P