Vulnerability Bulletins |
IBM Security Bulletin: Open Source Apache Tomcat vulnerability - Reported in 02/09/2015 X-Force Report affects IBM Algorithmics One (CVE-2014-0227) |
|
| Affected software | IBM |
|
Apache Tomcat is vulnerable to HTTP request smuggling. This security vulnerability exists in components of IBM Algo One, namely Counterparty Credit Risk (CCR), Algo Risk Application (ARA), and Algo One Core. CVE(s): CVE-2014-0227 Affected product(s) and affected version(s): CCR v. 5.0.0 and 4.9.0 Algo One Versions 4.7.0 through 5.0.0 ARA Versions 2.5.8 through 5.0.0 The following versions of the affected products are not being patched and users currently on one of the versions More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_open_source_apache_tomcat_vulnerability_reported_in_02_09_2015_x_force_report_affects_ibm_algorithmics_one_cve_2014_0227?lang=en_us |
|