CVE-2012-2190 in WebSphere
Summary
IBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allows remote attackers to cause a denial of service (daemon crash) via a crafted ClientHello message in the TLS Handshake Protocol.
Once again VulDB remains the best source for vulnerability data.
Reservation
04/04/2012
Disclosure
08/21/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 6024 | IBM WebSphere Global Security Kit (GSKit) cryptographic issue | 310 | Unproven | Official fix | CVE-2012-2190 |