description: The IBM Process Federation Server 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, and 19.0.0.3 Global Teams REST API does not properly shutdown the thread pools that it creates to retrieve Global Teams information from the federated systems. As a consequence, the Java Virtual Machine can't recover the memory used by those thread pools, which leads to an OutOfMemory exception when the Process Federation Server Global Teams REST API is used extensively. IBM X-Force ID: 177596.
problem types: Denial of Service
affected:
{
product: Process Federation Server
vendor: IBM
versions:
status: affected, version: 18.0.0.1
status: affected, version: 18.0.0.2
status: affected, version: 19.0.0.1
status: affected, version: 19.0.0.2
status: affected, version: 19.0.0.3
}
{
product: Automation Workstream Services in Cloud Pak for Automation
vendor: IBM
versions:
status: affected, version: 19.0.0.3
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
exploitCodeMaturity: UNPROVEN
integrityImpact: NONE
privilegesRequired: LOW
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 5.7
temporalSeverity: MEDIUM
userInteraction: NONE
vectorString: CVSS:3.0/C:N/S:U/A:H/PR:L/I:N/AV:N/AC:L/UI:N/RC:C/E:U/RL:O
version: 3.0
]