CVE-2012-0022

Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.

Date published : 2012-01-18

http://www.securityfocus.com/bid/51447

http://archives.neohapsis.com/archives/bugtraq/2012-01/0112.html