CVE-2020-4325

Katalog CVE

CVSS 6.5 · Medium EPSS 1,5%

Kerentanan Improper Resource Shutdown or Release pada ibm cloud pak for automation, ibm process federation server. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

The IBM Process Federation Server 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, and 19.0.0.3 Global Teams REST API does not properly shutdown the thread pools that it creates to retrieve Global Teams information from the federated systems. As a consequence, the Java Virtual Machine can't recover the memory used by those thread pools, which leads to an OutOfMemory exception when the Process Federation Server Global Teams REST API is used extensively. IBM X-Force ID: 177596.

Rincian

Terbit di NVD

2 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-404: Improper Resource Shutdown or Release

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 72,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://exchange.xforce.ibmcloud.com/vulnerabilities/177596 vdb entry · advisory vendor
• https://www.ibm.com/support/pages/node/6125403 advisory vendor