NetSight
medium5.0

CVE-2011-1318

Memory leak in org.apache.jasper.runtime.JspWriterImpl.response in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) before 7.0.0.…

Impact

Memory leak in org.apache.jasper.runtime.JspWriterImpl.response in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by accessing a JSP page of an application that is repeatedly stopped and restarted.

Affected products

VendorProductAffected versions
IbmWebsphere Application Server
through 7.0.0.13
Versions 2.0, 3.0, 3.0.2, 3.0.2.1, 3.0.2.2

Weakness classification

References