Boletines de Vulnerabilidades

IBM Security Bulletin: IBM WebSphere MQ is affected by a vulnerability in GSKit (CVE-2014-0076)


Información sobre el sistema

   
Software afectado IBM

Descripción

A vulnerability in GSKit, which is included in IBM WebSphere MQ, can potentially allow key information about certain kinds of binary type Elliptic Curves used in Digital signatures during signing operations. CVE(s): CVE-2014-0076 Affected product(s) and affected version(s): IBM WebSphere MQ 8.0, including all maintenance levels. IBM WebSphere MQ 7.5, including all maintenance levels. IBM WebSphere MQ 7.1, including all maintenance levels. IBM WebSphere MQ 7.0.1, maintenance levels from

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_websphere_mq_is_affected_by_a_vulnerability_in_gskit_cve_2014_00761?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2014-0076 ,CVE-2014-3566 and CVE-2014-6148.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-11-07

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT