Vulnerability Bulletins

IBM Security Bulletin: IBM Sterling External Authentication Server affected by a vulnerability in IBM Runtime Environment, Java™ Technology Edition (CVE-2014-0411)


System information

   
Affected software IBM

Description

IBM Sterling External Authentication Server is shipped with IBM Runtime Environment, Java™ Technology Edition (the “IBM JRE�), that is based on an Oracle Java Runtime Environment (JRE). Oracle has released the January 2014 critical patch updates (CPU) that contain security vulnerability fixes for the JRE. The IBM JRE has been updated to incorporate these fixes and security fixes that are specific to the IBM JRE. IBM Sterling External

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_sterling_external_authentication_server_affected_by_a_vulnerability_in_ibm_runtime_environment_java_technology_edition_cve_2014_0411?lang=en_us

Standar resources

Property Value
CVE CVE-2014-0411 ,CVE-2014-0050 ,CVE-2012-2159 and CVE-2012-2161.

Version history

Version Comments Date
1.0 Advisory issued 2014-05-23
Ministerio de Defensa
CNI
CCN
CCN-CERT