Denial of Service Vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2

Denial of Service Vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2

CVE-2014-7266 · HIGH Severity

AV:N/AC:L/AU:N/C:N/I:N/A:C

Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a denial of service (CPU consumption) via vectors that trigger colliding hash-table keys. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1983.

Learn more about our Web Application Penetration Testing UK.