CVE:CVE-2010-4623
CNNVD:CNNVD-201012-368
IBM Tivoli Access Manager for e-business是一个基于策略的电子商务访问控制解决方案。
IBM Tivoli Access Manager for e-business 6.1.1-TIV-AWS-FP0001之前的6.1.1版本中的WebSEAL中存在资源管理错误漏洞。远程攻击者可以借助shift-reload操作导致拒绝服务(worker线程消耗)。
solution:Upgrade ibm tivoli_access_manager_for_e-business to a higher version than 6.1.1,and avoid the version 6.1.1