Description
IBM WebSphere Commerce 6.0 Feature Pack 2 through Feature Pack 5, 7.0.0.0 through 7.0.0.8, and 7.0 Feature Pack 1 through Feature Pack 7 allows remote attackers to cause a denial of service (resource consumption and daemon crash) via a malformed id parameter in a request.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21671377
- JR49881 vendor-advisory
- 1030284 vdb-entry
- JR49996 vendor-advisory
- ibm-websphere-cve20140943-dos(92402) vdb-entry