The IBM Stax XMLStreamWriter in the Web Services component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 does not properly process XML encoding, which allows remote attackers to bypass intended access restrictions and possibly modify data via "XML fuzzing attacks" sent through SOAP requests.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-07-05T16:00:00
Updated: 2024-08-07T04:57:16.316Z
Reserved: 2009-03-14T00:00:00
Link: CVE-2009-0904
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-07-05T16:30:00.267
Modified: 2017-08-17T01:30:05.350
Link: CVE-2009-0904
Redhat
No data.