CVE-2011-1317 in WebSphere Application Server

Summary

Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by sending many JSP requests that trigger large responses.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 03/08/2011
• Disclosure: 03/08/2011
• Moderation: VulDB entry created
• Entries: VDB-56773 (1)
• CPE: ready
• CWE: CWE-399 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00458
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-1317
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-1317
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-1317/