IBM HTTP Server 8.5.0.0 < 8.5.5.24 / 9.0.0.0 < 9.0.5.16 要求分割攻擊 (6963650)

版本 1.1

Feb 27, 2024, 4:10 PM

CVSS metrics ("CVSSv2 score" set to 10.0. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C". "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H". "CVSSv3 score" set to 9.8)
CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C")
CVSSv2 severity (based on CVE-2023-25690, severity increased from "Medium" to "High")
CVSSv3 severity (based on None, severity increased from "Medium" to "High")
Exploit attributes ("Exploit available" set to "True". "Exploitability ease" set to "Exploits are available")