CVE-2011-4858: Medium severity tomcat vulnerability
Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4858?
CVE-2011-4858 is classified with a moderate severity level due to its potential to cause denial of service through CPU consumption.
How do I fix CVE-2011-4858?
To remediate CVE-2011-4858, you should upgrade to Apache Tomcat version 5.5.35, 6.0.35, or 7.0.23 or later.
What types of attacks can exploit CVE-2011-4858?
CVE-2011-4858 can be exploited through crafted form parameters designed to trigger predictable hash collisions.
Which versions of Apache Tomcat are affected by CVE-2011-4858?
CVE-2011-4858 affects Apache Tomcat versions prior to 5.5.35, 6.x prior to 6.0.35, and 7.x prior to 7.0.23.
What is the impact of CVE-2011-4858 on a web application?
The impact of CVE-2011-4858 is an increased CPU consumption leading to potential denial of service for the web application.