Lucene search

K
prionPRIOn knowledge basePRION:CVE-2011-5034
HistoryDec 30, 2011 - 1:55 a.m.

Design/Logic Flaw

2011-12-3001:55:00
PRIOn knowledge base
www.prio-n.com
6

5.3 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461.

References