First published: Fri Jan 20 2012(Updated: )
IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ibm Websphere Application Server | =6.0.0.0 | |
Ibm Websphere Application Server | =6.0.0.2 | |
Ibm Websphere Application Server | =6.0.0.3 | |
Ibm Websphere Application Server | =6.0.1.0 | |
Ibm Websphere Application Server | =6.0.1.11 | |
Ibm Websphere Application Server | =6.0.1.12 | |
Ibm Websphere Application Server | =6.0.2.0 | |
Ibm Websphere Application Server | =6.0.2.1 | |
Ibm Websphere Application Server | =6.0.2.2 | |
Ibm Websphere Application Server | =6.0.2.3 | |
Ibm Websphere Application Server | =6.0.2.4 | |
Ibm Websphere Application Server | =6.0.2.5 | |
Ibm Websphere Application Server | =6.0.2.6 | |
Ibm Websphere Application Server | =6.0.2.7 | |
Ibm Websphere Application Server | =6.0.2.8 | |
Ibm Websphere Application Server | =6.0.2.9 | |
Ibm Websphere Application Server | =6.0.2.11 | |
Ibm Websphere Application Server | =6.0.2.13 | |
Ibm Websphere Application Server | =6.0.2.15 | |
Ibm Websphere Application Server | =6.0.2.17 | |
Ibm Websphere Application Server | =6.0.2.19 | |
Ibm Websphere Application Server | =6.0.2.21 | |
Ibm Websphere Application Server | =6.0.2.23 | |
Ibm Websphere Application Server | =6.0.2.25 | |
Ibm Websphere Application Server | =6.0.2.27 | |
Ibm Websphere Application Server | =6.0.2.29 | |
Ibm Websphere Application Server | =6.0.2.31 | |
Ibm Websphere Application Server | =6.0.2.33 | |
Ibm Websphere Application Server | =6.0.2.35 | |
Ibm Websphere Application Server | =6.0.2.37 | |
Ibm Websphere Application Server | =6.0.2.43 | |
Ibm Websphere Application Server | =6.1.0.0 | |
Ibm Websphere Application Server | =6.1.0.1 | |
Ibm Websphere Application Server | =6.1.0.3 | |
Ibm Websphere Application Server | =6.1.0.5 | |
Ibm Websphere Application Server | =6.1.0.7 | |
Ibm Websphere Application Server | =6.1.0.9 | |
Ibm Websphere Application Server | =6.1.0.11 | |
Ibm Websphere Application Server | =6.1.0.13 | |
Ibm Websphere Application Server | =6.1.0.14 | |
Ibm Websphere Application Server | =6.1.0.15 | |
Ibm Websphere Application Server | =6.1.0.17 | |
Ibm Websphere Application Server | =6.1.0.19 | |
Ibm Websphere Application Server | =6.1.0.21 | |
Ibm Websphere Application Server | =6.1.0.23 | |
Ibm Websphere Application Server | =6.1.0.25 | |
Ibm Websphere Application Server | =6.1.0.27 | |
Ibm Websphere Application Server | =6.1.0.33 | |
Ibm Websphere Application Server | =6.1.0.35 | |
Ibm Websphere Application Server | =6.1.0.37 | |
Ibm Websphere Application Server | =6.1.0.39 | |
Ibm Websphere Application Server | =6.1.0.41 | |
Ibm Websphere Application Server | =7.0.0.1 | |
Ibm Websphere Application Server | =7.0.0.2 | |
Ibm Websphere Application Server | =7.0.0.3 | |
Ibm Websphere Application Server | =7.0.0.5 | |
Ibm Websphere Application Server | =7.0.0.7 | |
Ibm Websphere Application Server | =7.0.0.9 | |
Ibm Websphere Application Server | =7.0.0.11 | |
Ibm Websphere Application Server | =7.0.0.13 | |
Ibm Websphere Application Server | =7.0.0.15 | |
Ibm Websphere Application Server | =7.0.0.17 | |
Ibm Websphere Application Server | =7.0.0.19 | |
Ibm Websphere Application Server | =7.0.0.21 | |
Ibm Websphere Application Server | =8.0.0.0 | |
Ibm Websphere Application Server | =8.0.0.1 | |
Ibm Websphere Application Server | =8.0.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.