The web-server plugin in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 when POST retries are enabled allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.