Vulnerability Bulletins |
IBM Security Bulletin: Multiple vulnerabilities in AppScan Enterprise (CVE-2014-4806, CVE-2014-0411) |
|
| Affected software | IBM |
|
Previous releases of IBM Security AppScan Enterprise are affected by a transport layer security (TLS) timing vulnerability reported in the IBM Runtime Environment, Java(TM) Technology Edition, Version 6 and a password file temporarily created during installation. CVE(s): CVE-2014-0411 and CVE-2014-4806 Affected product(s) and affected version(s): IBM Security AppScan Enterprise 9.0 IBM Security AppScan Enterprise 8.8 IBM Security AppScan Enterprise 8.7 IBM Security AppScan Enterprise 8.6 More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_appscan_enterprise_cve_2014_4806_cve_2014_04111?lang=en_us |
|