CVE-2011-1317 Information

Description

Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by sending many JSP requests that trigger large responses.

Reference

http://www-01.ibm.com/support/docview.wss?uid=swg1PM19500 http://www-01.ibm.com/support/docview.wss?uid=swg27014463