CVE-2012-0193 in IBM WebSphere

Resumen (Inglés)

IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2011-12-14

Divulgación

2012-01-19

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
4556	IBM WebSphere Application Server escalada de privilegios	20	Prueba de concepto	Arreglo oficial	CVE-2012-0193

Fuentes

• MITRE
• NVD
• CVE Details