Vulnerability Bulletins

IBM Security Bulletin: A Vulnerability in Apache Santuario affects IBM Cúram(CVE-2013-2172)

   
Affected software IBM
 
IBM Cúram is shipped with a third party library called Santuario, which is vulnerable to a Java spoofing attack. CVE(s): CVE-2013-2172 Affected product(s) and affected version(s): IBM Cúram Social Program Management 5.2 SP6 IBM Cúram Social Program Management 6.0 SP2 IBM Cúram Social Program Management 6.0.4.6 IBM Cúram Social Program Management 6.0.5 IBM Cúram Social Program Management 6.1 IBM Care Management 6.0 Refer to the following

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_a_vulnerability_in_apache_santuario_affects_ibm_c%25C3%25BAram_cve_2013_2172?lang=en_us