CVE-2012-5953

IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service (infinite loop) via a crafted query string.

Score

CVSS 2.0 4.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2013-02-20

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Websphere Message Broker (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1PM75015
• http://www-01.ibm.com/support/docview.wss?uid=swg21623316
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80667