Summary
Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload.
Products Potentially Affected
|
OS/Product
|
Exposure
|
|
ExtremeAnalytics for Site Engine
|
Yes
|
|
ExtremeControl for Site Engine
|
Yes
|
|
ExtremeCloud IQ Controller (IQC/XCC)
|
Yes
|
Repair Recommendations
ExtremeAnalytics for Site Engine:
- Fixed in 25.8.10 or later.
ExtremeControl for Site Engine:
- Fixed in 25.8.10 or later
ExtremeCloud IQ Controller (IQC/XCC):
- Fixed in 10.14.04 or later
- Fixed in 10.15.02 or later
- Fixed in 10.17.01 or later
Please see the full security advisory article here for more details and future updates.
