IBM Security Verify Information Queue Denial-of-Service Vulnerability via Special Character Handling

A denial-of-service vulnerability has been identified in IBM Security Verify Information Queue versions 10.0.5, 10.0.6, 10.0.7, and 10.0.8. This vulnerability could allow a remote user to cause uncontrolled resource consumption by exploiting improper handling of special characters, leading to excessive use of system resources.

Impact

Exploitation of this vulnerability can cause a significant increase in resource consumption, potentially leading to a denial-of-service condition where the application or service becomes unresponsive or unavailable.

Remediation

Users are advised to upgrade to IBM Security Verify Information Queue version 10.0.11. The latest ISIQ images for v10.0.11 can be downloaded from the IBM Security Information Queue Starter Kit page.