CVE-2009-0904 - The IBM Stax XMLStreamWriter in the Web Services component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 does not properly process XML encoding, which allows remote attackers to bypass intended access restrictions and possibly modify data via "XML fuzzing attacks" sent through SOAP requests

Back Back to CVE browser

MEDIUM

The IBM Stax XMLStreamWriter in the Web Services component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 does not properly process XML encoding, which allows remote attackers to bypass intended access restrictions and possibly modify data via "XML fuzzing attacks" sent through SOAP requests

Published Jul 5, 2009

6.4

MEDIUM

CVSS 2.0

EPSS 2.02%

Description

The IBM Stax XMLStreamWriter in the Web Services component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 does not properly process XML encoding, which allows remote attackers to bypass intended access restrictions and possibly modify data via "XML fuzzing attacks" sent through SOAP requests.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (5)

http://www-01.ibm.com/support/docview.wss?uid=swg27007951
x_refsource_CONFIRM
http://www-1.ibm.com/support/docview.wss?uid=swg1PK84015
vendor-advisoryx_refsource_AIXAPAR
http://www.securityfocus.com/bid/35741
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0901
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51490
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www-01.ibm.com/support/docview.wss?uid=swg27007951		x_refsource_CONFIRM
http://www-1.ibm.com/support/docview.wss?uid=swg1PK84015		vendor-advisoryx_refsource_AIXAPAR
http://www.securityfocus.com/bid/35741		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0901		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51490		vdb-entryx_refsource_XF