Vulnerability Bulletins |
IBM Security Bulletin: Multiple IBM InfoSphere Information Server components are vulnerable due to the following Castor Library vulnerability (CVE-2014-3004) |
|
| Affected software | IBM |
|
Castor Library could allow a remote attacker to obtain sensitive information in various IBM Information Server components. This is caused by an XML External Entity Injection (XXE) error when processing XML data. By sending specially-crafted XML data, an attacker could exploit this vulnerability to obtain sensitive information. CVE(s): CVE-2014-3004 Affected product(s) and affected version(s): The following products, running on all supported platforms, are affected: IBM InfoSphere More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_ibm_infosphere_information_server_components_are_vulnerable_due_to_the_following_castor_library_vulnerability_cve_2014_3004?lang=en_us |
|