title: IBM Safer Payments denial of service
description: IBM Counter Fraud Management for Safer Payments 6.1.0.00, 6.2.0.00, 6.3.0.00 through 6.3.1.03, 6.4.0.00 through 6.4.2.02 and 6.5.0.00 does not properly allocate resources without limits or throttling which could allow a remote attacker to cause a denial of service.  IBM X-Force ID:  249190.
problem types: CWE-770 Allocation of Resources Without Limits or Throttling
affected:
{
defaultStatus: unaffected
product: Safer Payments
vendor: IBM
versions:
status: affected, version: 6.1.0.00, 6.2.0.00, 6.5.0.00
lessThanOrEqual: 6.3.1.03, status: affected, version: 6.3.0.00, versionType: semver
lessThanOrEqual: 6.4.2.02, status: affected, version: 6.4.0.00, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL