CVE:CVE-2009-2749
CNNVD:CNNVD-200912-090
IBM WebSphere Application Server (WAS)是由IBM遵照开放标准，例如Java EE, XML还有Web Services，开发并发行的一种应用服务器。IBM WebSphere Application Server 7.0.0.7的1.0.0.1版本之前的Communications Enabled Applications (CEA)的Feature Pack使用可预报的会谈值,处于中介的攻击者可以通过估值骗取协作会谈。
solution:Upgrade ibm websphere_application_server to a higher version than 7.0.0.7,and avoid the version 7.0.0.7; Upgrade ibm communications_enabled_applications to a higher version than 1.0,and avoid the version (,1.0]