Design/Logic Flaw

2007-01-1205:04:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.2%

JSON

Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.

CPENameOperatorVersion
direct_web_remotingeq1.0
direct_web_remotingeq0.8
direct_web_remotingeq1.1.2
direct_web_remotingeq1.1.0
direct_web_remotingeq0.9
direct_web_remotingeq0.7
direct_web_remotingeq1.1.1
direct_web_remotingle1.1.3

Name	Operator	Version
direct_web_remoting	eq	1.0
direct_web_remoting	eq	0.8
direct_web_remoting	eq	1.1.2
direct_web_remoting	eq	1.1.0
direct_web_remoting	eq	0.9
direct_web_remoting	eq	0.7
direct_web_remoting	eq	1.1.1
direct_web_remoting	le	1.1.3