Vulnerability Bulletins

IBM Security Bulletin: Potential security vulnerabilities in current IBM SDK Java Technology Edition for IBM Tivoli Network Manager January 2014 CPU


System information

   
Affected software IBM

Description

Potential security exposure when using JavaTM based applications due to vulnerabilities in Java Software Developer Kits. See Vulnerability Details for CVE IDs. CVE(s): CVE-2014-0411 Affected product(s) and affected version(s): The 3.8.x versions of Tivoli Network Manager bundled the TIP version 1.1.1.x, IBM WebSphere version 6.1.0.x and the JRE from IBM SDK Java 2 Technology Edition Version 6. The 3.9.x and 4.1 versions of Tivoli Network Manager bundled the TIP version 2.1.0.x, IBM

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_potential_security_vulnerabilities_in_current_ibm_sdk_java_technology_edition_for_ibm_tivoli_network_manager_january_2014_cpu?lang=en_us

Standar resources

Property Value
CVE CVE-2014-0411 ,CVE-2013-4043 and CVE-2014-0873.

Version history

Version Comments Date
1.0 Advisory issued 2014-03-12
Ministerio de Defensa
CNI
CCN
CCN-CERT