IBM Security Bulletin: A vulnerability in Apache CXF could affect IBM Performance Management products (CVE-2017-12624)

Sep 10, 2018 9:00 am EDT

Categorized: Medium Severity

Share this post:

Apache CXF is vulnerable to a denial of service. By using a specially crafted message attachment header, a remote attacker could exploit this vulnerability to cause the AX-WS and JAX-RS services to stop responding.

CVE(s): CVE-2017-12624

Affected product(s) and affected version(s):

IBM Application Performance Management Base Private 8.1.4
IBM Application Performance Management Advanced Private 8.1.4

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10728087
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/135095

from IBM Product Security Incident Response Team https://ift.tt/2CFHoSF