CVE-2010-4593 — The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a certain reference count, which allows remote authenticated users to cause a denial of service (IP address exhaustion) by making invalid attempts to establish sessions with the same VPN ID from multiple devices

Back Back to CVE browser

MEDIUM

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a certain reference count, which allows remote authenticated users to cause a denial of service (IP address exhaustion) by making invalid attempts to establish sessions with the same VPN ID from multiple devices

Published Dec 22, 2010

4.0

MEDIUM

CVSS 2.0

EPSS 1.13%

Description

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a certain reference count, which allows remote authenticated users to cause a denial of service (IP address exhaustion) by making invalid attempts to establish sessions with the same VPN ID from multiple devices.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.13% 0.01125

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01125

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.13% (0.01125)	65.08th	v5 (v2026.06.15)
Jun 15, 2026	1.13% (0.01125)	61.95th	v5 (v2026.06.15)
Mar 17, 2025	0.41% (0.00406)	59.00th	v4 (v2025.03.14)
Dec 12, 2024	0.32% (0.00316)	71.22th	v3 (v2023.03.01)
Feb 8, 2024	0.32% (0.00316)	69.54th	v3 (v2023.03.01)
Mar 7, 2023	0.32% (0.00316)	65.59th	v3 (v2023.03.01)
Mar 6, 2023	1.06% (0.01061)	52.82th	v2 (v2022.01.01)
Sep 19, 2022	1.06% (0.01061)	51.19th	v2 (v2022.01.01)
Apr 1, 2022	1.06% (0.01061)	49.19th	v2 (v2022.01.01)
Feb 4, 2022	1.06% (0.01061)	28.23th	v2 (v2022.01.01)

Weaknesses (1)

CWE-399

References (3)

http://secunia.com/advisories/42703
third-party-advisoryx_refsource_SECUNIA
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ75012
vendor-advisoryx_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg27020327
x_refsource_CONFIRM

Link	Providers	Tags
http://secunia.com/advisories/42703		third-party-advisoryx_refsource_SECUNIA
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ75012		vendor-advisoryx_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg27020327		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 22, 2010

Updated Aug 7, 2024

Reserved Dec 22, 2010

Link CVE-2010-4593

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2010-4593

Red Hat

Severity n/a

Public date n/a

Links CVE-2010-4593