IBM WebSphere Application Server Web Services Feature Pack Multiple Vulnerabilities

Last Update Date: 10 Nov 2011 Release Date: 8 Nov 2011 5903 Views

RISK: Medium Risk

TYPE: Servers - Internet App Servers

Multiple vulnerabilities have been identified in IBM WebSphere Application Server Web Services Feature Pack, which can be exploited by malicious people to cause a Denial of Service (DoS).

WSRMModule holds on to AxisService references and eventually causes OutOfMemory error.
org.apache.commons.logging.LogFactory retaining a reference to an SCAClassLoader cause OutOfMemory error.
JAX-WS MTOM requests fail when trace is enabled.
JAX-WS applications on Feature Pack for Web Services 6.1.0.37 might malfunction when webservices trace is enabled.
Possible security vulnerability in WS-Security enabled JAX-WS applications.