Vulnerability Bulletins

IBM Security Bulletin:Sterling Web Channel is affected by Apache Struts 2 security vulnerabilities (CVE-2013-4310, CVE-2013-4316, CVE-2013-2251, CVE-2013-2248, CVE-2013-2135, CVE-2013-2134, CVE-2013-2


System information

   
Affected software IBM

Description

IBM Sterling Web Channel use Apache Struts 2 and is affected by some of the vulnerabilities that exist in Apache Struts 2. CVE(s): CVE-2013-4310, CVE-2013-4316, CVE-2013-2251, CVE-2013-2248, CVE-2013-2135, CVE-2013-2134, CVE-2013-2115, CVE-2013-1966 and CVE-2013-1965 Affected product(s) and affected version(s): Sterling Web Channel 9.0 Sterling Web Channel 9.1 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin:

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_sterling_web_channel_is_affected_by_apache_struts_2_security_vulnerabilities_cve_2013_4310_cve_2013_4316_cve_2013_2251_cve_2013_2248_cve_2013_2135_cve_2013_2134_cve_2013_2115

Standar resources

Property Value
CVE

Version history

Version Comments Date
1.0 Advisory issued 2014-05-30
Ministerio de Defensa
CNI
CCN
CCN-CERT