Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM WebSphere Application Server输入验证漏洞
Vulnerability Description
IBM WebSphere Application Server（WAS）是美国IBM公司开发并发行的一款应用服务器产品，它是Java EE和Web服务应用程序的平台，也是IBM WebSphere软件平台的基础。 IBM WebSphere Application Server (WAS)6.0至6.0.2.43版本，6.1.0.43之前的6.1版本，7.0.0.23之前的7.0版本，8.0.0.3之前的8.0版本中存在漏洞，该漏洞源于在未限制能力去触发预测的哈希崩溃时为form参数计算哈希值。远程攻击
CVSS Information
N/A
Vulnerability Type
N/A