CVE Vulnerabilities

CVE-2021-39016

Published: Jul 14, 2022 | Modified: Mar 25, 2025
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the software to transmit more traffic than should be allowed for that actor. IBM X-Force ID: 213722.

Affected Software

NameVendorStart VersionEnd Version
Engineering_lifecycle_optimization_-_publishingIbm6.0.6 (including)6.0.6 (including)
Engineering_lifecycle_optimization_-_publishingIbm6.0.6.1 (including)6.0.6.1 (including)
Engineering_lifecycle_optimization_-_publishingIbm7.0.1 (including)7.0.1 (including)
Engineering_lifecycle_optimization_publishingIbm7.0 (including)7.0 (including)
Engineering_lifecycle_optimization_publishingIbm7.0.2 (including)7.0.2 (including)

References