OutOfMemory Handling Issue in IBM Process Federation Server
CVE-2020-4325

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Process Federation Server
Automation Workstream Services In Cloud Pak For Automation
Vendor
CVE Published:
2 April 2020

What is CVE-2020-4325?

The Global Teams REST API of IBM Process Federation Server versions 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, and 19.0.0.3 experiences an issue where thread pools created for retrieving Global Teams information are not properly shut down. This oversight results in the inability of the Java Virtual Machine to reclaim memory used by these thread pools, leading to potential OutOfMemory exceptions during extensive use of the REST API.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Automation Workstream Services in Cloud Pak for Automation 19.0.0.3

Process Federation Server 18.0.0.1

Process Federation Server 18.0.0.2

References

https://www.ibm.com/support/pages/node/6125403
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/177596
vdb-entryx_refsource_XF

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.