Vulnerability Bulletins

IBM Security Bulletin: Apache Tomcat vulnerabilities affect IBM SAN Volume Controller and Storwize Family (CVE-2014-0227 CVE-2014-0230)


System information

   
Affected software IBM

Description

Apache Tomcat DoS and unauthorized access vulnerabilities CVE(s): CVE-2014-0227 and CVE-2014-0230 Affected product(s) and affected version(s): IBM SAN Volume Controller IBM Storwize V7000 IBM Storwize V5000 IBM Storwize V3700 IBM Storwize V3500 All products are affected when running code releases 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3 and 7.4 except for versions 7.3.0.10 and 7.4.0.5 and above. Version 7.5 is unaffected. Refer to the following reference URLs for remediation and

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_apache_tomcat_vulnerabilities_affect_ibm_san_volume_controller_and_storwize_family_cve_2014_0227_cve_2014_0230?lang=en_us

Standar resources

Property Value
CVE CVE-2014-0227 ,CVE-2014-0230 ,CVE-2015-0410 ,CVE-2014-6593 ,CVE-2015-0488 ,CVE-2015-0478 ,CVE-2015-0204 and CVE-2015-2808.

Version history

Version Comments Date
1.0 Advisory issued 2015-07-28
Ministerio de Defensa
CNI
CCN
CCN-CERT