CVE-2009-1901: Critical severity IBM WebSphere Application Server Feature Pack for Web Services vulnerability
Published Jun 3, 2009
·Updated
The Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 permits "non-standard http methods," which has unknown impact and remote attack vectors.
Affected Software
33 affected components
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.10
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.5
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.20
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.13
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.9
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.28
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.11
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.6
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.2
IBM WebSphere Application Server Feature Pack for Web Services<=6.0.2.33
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.24
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.21
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.15
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.4
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.32
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.17
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.30
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.29
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.23
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.18
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.16
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.7
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.27
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.12
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.22
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.3
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.19
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.25
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.8
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.14
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.31
Remediation
Patch Available
Patch Available
Event History
Jun 3, 2009
CVE Published
via MITRE·04:33 PM
Data Sourced
via MITRE·04:33 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1901?
CVE-2009-1901 has an unknown severity but allows non-standard HTTP methods which can lead to potential remote attacks.
2
How do I fix CVE-2009-1901?
To address CVE-2009-1901, upgrade IBM WebSphere Application Server to version 6.0.2.35 or later.
3
What versions of IBM WebSphere Application Server are affected by CVE-2009-1901?
CVE-2009-1901 affects multiple versions of IBM WebSphere Application Server prior to 6.0.2.35.
4
What are the potential impacts of CVE-2009-1901?
The potential impact of CVE-2009-1901 includes unauthorized access through non-standard HTTP methods, which could compromise the application.
5
Is there a workaround for CVE-2009-1901?
There are no official workarounds for CVE-2009-1901, so upgrading to the fixed version is recommended.