CVE-2024-27268

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27268
IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 284574.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/284574 VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/7145809 Vendor Advisory
https://www.kb.cert.org/vuls/id/421644 Third Party Advisory US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/284574 VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/7145809 Vendor Advisory
https://www.kb.cert.org/vuls/id/421644 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*
History

27 Feb 2025, 17:58

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/284574 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/284574 - VDB Entry, Vendor Advisory
References () https://www.ibm.com/support/pages/node/7145809 - () https://www.ibm.com/support/pages/node/7145809 - Vendor Advisory
References () https://www.kb.cert.org/vuls/id/421644 - () https://www.kb.cert.org/vuls/id/421644 - Third Party Advisory, US Government Resource
CPE cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*
First Time Ibm
Ibm websphere Application Server

21 Nov 2024, 09:04

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/284574 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/284574 -
References () https://www.ibm.com/support/pages/node/7145809 - () https://www.ibm.com/support/pages/node/7145809 -
References () https://www.kb.cert.org/vuls/id/421644 - () https://www.kb.cert.org/vuls/id/421644 -

16 May 2024, 01:15

Type Values Removed Values Added
CWE CWE-400 CWE-770
Summary (en) IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.3 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 284574. (en) IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 284574.

04 May 2024, 14:16

Type Values Removed Values Added
References
  • () https://www.kb.cert.org/vuls/id/421644 -
Summary
  • (es) IBM WebSphere Application Server Liberty 18.0.0.2 a 24.0.0.3 es vulnerable a una denegación de servicio provocada por el envío de una solicitud especialmente manipulada. Un atacante remoto podría aprovechar esta vulnerabilidad para hacer que el servidor consuma recursos de memoria. ID de IBM X-Force: 284574.

04 Apr 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-04 18:15

Updated : 2025-02-27 17:58

NVD link : CVE-2024-27268

Mitre link : CVE-2024-27268

CVE.ORG link : CVE-2024-27268

JSON object : View

Products Affected

ibm

  • websphere_application_server
CWE
CWE-770

Allocation of Resources Without Limits or Throttling