IBM Support

Maximo update for Potential security exposure with IBM HTTP Server (PM46234) (CVE-2011-3192)

Flashes (Alerts)


Abstract

Maximo products using WebShere and IBM HTTP Server are exposed to potential security exposure (PM46234) (CVE-2011-3192).

Content

Maximo products using WebShere and IBM HTTP Server are exposed to potential security exploit (PM46234) (CVE-2011-3192).

This exploit allows HTTP requests using byte ranges to contain ranges larger than the size of the file being served. Performing a significant number of these requests can result in a denial of service.

All customers using IBM HTTP Server should review the following IBM HTTP Server Flash for the most up-to date information:

http://www.ibm.com/support/docview.wss?uid=swg21512087&myns=swgws&mynp=OCSSCKBL&mynp=OCSS7K4U&mynp=OCSSEQTJ&mync=E

To determine the version of software you are using, log into the WebSphere administrative console and view the Welcome page.

Review the table below for product version association information:

Maximo 6.2.0 through 6.2.7
Maximo Release
IBM WebSphere / IBM HTTP Server version
6.0.0
 6.0.0.2
6.1.0
 6.0.0.11
6.2.0
 6.0.0.11
6.2.1
 6.0.0.11
6.2.2
 6.0.0.23
6.2.3
 6.0.0.23
6.2.4
 6.0.0.23
6.2.5
 6.0.0.23
6.2.6
 6.0.2.39 – 6.1.0.29
6.2.7
 6.0.2.39 – 6.1.0.29


Maximo Base Services 7.1.1.0 through 7.1.1.8
Maximo Release
IBM WebSphere / IBM HTTP Server version
7.1.1.0
 6.1.0.17 – 6.1.0.19
7.1.1.1
 6.1.0.17 – 6.1.0.19
7.1.1.2
 6.1.0.17 – 6.1.0.19
7.1.1.3
 6.1.0.17 – 6.1.0.19
7.1.1.4
 6.1.0.17 – 6.1.0.19
7.1.1.5
 6.1.0.23
7.1.1.6
 6.1.0.23 – 6.1.0.31
7.1.1.7
 6.1.0.23 – 6.1.0.33


Maximo Base Services 7.50
Maximo Release
IBM WebSphere / IBM HTTP Server version
7.5.0
 7.0.0.15

[{"Line of Business":{"code":"LOB59","label":"Sustainability Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSKTXT","label":"Tivoli Change and Configuration Management Database"},"ARM Category":[{"code":"","label":""}],"Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"7.2.1"},{"Line of Business":{"code":"LOB59","label":"Sustainability Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSLKT6","label":"IBM Maximo Asset Management"},"ARM Category":[{"code":"","label":""}],"Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"7.2.1;7.5"},{"Line of Business":{"code":"LOB59","label":"Sustainability Software"},"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Product":{"code":"SSLKTY","label":"Maximo Asset Management for IT"},"ARM Category":[{"code":"","label":""}],"Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"}],"Version":"7.2;7.2.1;7.2.2"},{"Line of Business":{"code":"LOB59","label":"Sustainability Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS6HJK","label":"Tivoli Service Request Manager"},"ARM Category":[{"code":"","label":""}],"Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"","label":"Windows 2003 server"},{"code":"","label":"Windows 2008 server"}],"Version":"7.2;7.2.1"}]

Document Information

Modified date:
25 September 2022

UID

swg21515311

Page Feedback