CVE-2009-0904 | BDVDB-2026-37280 Detail

Description#

The IBM Stax XMLStreamWriter in the Web Services component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 does not properly process XML encoding, which allows remote attackers to bypass intended access restrictions and possibly modify data via "XML fuzzing attacks" sent through SOAP requests.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg27007951
https://exchange.xforce.ibmcloud.com/vulnerabilities/51490
http://www.securityfocus.com/bid/35741
http://www-1.ibm.com/support/docview.wss?uid=swg1PK84015

Exploit#

No public exploit known

History#

Version 12009-07-05Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.