QID 375955

Date Published: 2021-10-14

QID 375955: IBM Security SiteProtector System Apache Hypertext Transfer Protocol (HTTP) Server Vulnerabilities

IBM Security SiteProtector System is a centralized management system that unifies management and analysis for network, server and endpoint security agents and appliances. It reduces the cost and complexity of security management, helps you monitor and measure your exposure to vulnerabilities and demonstrate regulatory compliance. IBM Security SiteProtector system can help minimize your overall risk and increase the efficacy of your security team, while optimizing cost efficiency.

Affected Versions:
IBM Security SiteProtector System 3.0.0
IBM Security SiteProtector System 3.1.1
QID Detection Logic:
This QID detects the vulnerable version by checking the file version of SPLogAgent.exe in the installed directory

Successful exploitation of the vulnerability may allow a local attacker to stop httpd on Windows, resulting in a denial of service.

CVSS V3 rated as Medium - 5.5 severity.

CVSS V2 rated as Medium - 5 severity.

Solution

Vendor has released updated version to address this issue. Refer to IBM Security SiteProtector System for details.

Vendor References

IBM Security Advisory - www.ibm.com/support/pages/node/6494731

CVEs related to QID 375955

CVE-2020-13938 | CVE-2021-30641 |

Software Advisories

Advisory ID	Software	Component	Link
IBM Security SiteProtector System			www.ibm.com/support/pages/node/6494731

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].