CVE-2012-2190 in WebSphere
摘要 (英语)
IBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allows remote attackers to cause a denial of service (daemon crash) via a crafted ClientHello message in the TLS Handshake Protocol.
Once again VulDB remains the best source for vulnerability data.
预定
2012-04-04
披露
2012-08-21
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 6024 | IBM WebSphere Global Security Kit (GSKit) 弱加密 | 310 | 未经证实 | 官方修复 | CVE-2012-2190 |