IBM WebSphere Application Server Stax XMLStreamWrite安全绕过漏洞

Bugraq ID: 35741 CVE ID：CVE-2009-0904 CNCVE ID：CNCVE-20090904 IBM WebSphere Application Server是一款商业性质的WEB应用服务程序。 IBM WebSphere Application Server Stax XMLStreamWrite存在安全绕过问题，远程攻击者可以利用漏洞通过SOAP请求绕过部分安全限制修改数据并发送。 目前没有详细漏洞细节提供。 IBM Websphere Application Server 6.1.2 IBM Websphere Application Server 6...

CVE-2009-0904

The CVE-2009-0904 issue affects IBM WebSphere Application Server 6.1 before 6.1.0.25, specifically the Stax XMLStreamWriter in the Web Services component. The root cause is improper XML encoding handling, which can allow remote attackers to bypass access controls and potentially modify data via X...