Security Bulletin: A vulnerability in Open Source Apache Tomcat affects IBM FlashSystem 840, (CVE-2014-0230)

Summary

There is a vulnerability in Open Source Apache Tomcat that is used by IBM FlashSystem 840 which allows remote attackers to cause a denial of service under certain scenarios.

Vulnerability Details

CVE-ID: CVE-2014-0230 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by missing limitations on request body size. By sending a specially crafted request to the server, an attacker could keep a connection open and force Tomcat to keep a processing thread allocated to the connection.
CVSS Base Score: 5
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/102131&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Affected Products and Versions

FlashSystem 840, MTMs 9840-AE1 and 9843-AE1 at code level 1.1.3.7 and earlier are affected.

Remediation/Fixes

You should verify applying this fix does not cause any compatibility issues.

1.1.3.8 is available @ IBM’s Fix Central**:**840 fixes, download 1.1.3.8 or later

Workarounds and Mitigations

None