IBM Security Bulletin: Daeja ViewONE Professional, Standard & Virtual does not have limits for large or slow workloads.

ViewONE does not ensure that content is small enough before completing work, nor does it have timeouts for some processes.

CVE(s): CVE-2017-1212

Affected product(s) and affected version(s):

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2zTVSc4
X-Force Database: http://ift.tt/2xt4VPt

The post IBM Security Bulletin: Daeja ViewONE Professional, Standard & Virtual does not have limits for large or slow workloads. appeared first on IBM PSIRT Blog.

Product Name	Affected Versions
Daeja ViewONE Virtual	5.0.0
Daeja ViewONE Professional, Standard & Virtual	4.1.5

from IBM Product Security Incident Response Team http://ift.tt/2zTVTg8