Unrated severityNVD Advisory· Published Aug 15, 2011· Updated Apr 29, 2026
CVE-2011-3140
CVE-2011-3140
Description
IBM Web Application Firewall, as used on the G400 IPS-G400-IB-1 and GX4004 IPS-GX4004-IB-2 appliances with update 31.030, does not properly handle query strings with multiple instances of the same parameter, which allows remote attackers to bypass intended intrusion prevention by dividing a dangerous parameter value into substrings, as demonstrated by a SQL statement that is split across multiple iid parameters and then sent to a .aspx file on an IIS web server.
Affected products
3- cpe:2.3:a:ibm:web_application_firewall:-:*:*:*:*:*:*:*
- cpe:2.3:h:ibm:g400_ips-g400-ib-1_appliance:31.030:*:*:*:*:*:*:*
- cpe:2.3:h:ibm:gx4004_ips-gx4004-ib-2_appliance:31.030:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- securitytracker.com/idnvdExploit
- www.trustwave.com/spiderlabs/advisories/TWSL2011-006.txtnvdExploit
- securityreason.com/securityalert/8339nvd
- www.iss.net/security_center/reference/vuln/HTTP_Parameter_Abuse.htmnvd
- www.securityfocus.com/archive/1/518556/100/0/threadednvd
- www.securityfocus.com/bid/48370nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/67178nvd
News mentions
0No linked articles in our index yet.