Boletines de Vulnerabilidades

IBM Security Bulletin: Security vulnerabilities in Apache Tomcat for WebSphere Application Server Community Edition 2.1.1.6 and 3.0.0.4(CVE-2014-0075, CVE-2014-0096 and CVE-2014-0119)


Información sobre el sistema

   
Software afectado IBM

Descripción

Security vulnerabilities exist in Apache Tomcat May 2014 X-Force Report that is shipped with IBM WebSphere Application Server Community Edition 2.1.1.6 and 3.0.0.4 CVE(s): CVE-2014-0075, CVE-2014-0096 and CVE-2014-0119 Affected product(s) and affected version(s): WebSphere Application Server Community Edition 2.1.1.6 WebSphere Application Server Community Edition 3.0.0.4 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin:

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_security_vulnerabilities_in_apache_tomcat_for_websphere_application_server_community_edition_2_1_1_6_and_3_0_0_4_65288_cve_2014_0075_cve_2014_0096_and_cve_2014_0119_65289?lan

Identificadores estándar

Propiedad Valor
CVE CVE-2014-0075 ,CVE-2014-0096 ,CVE-2014-0119 ,CVE-2014-3566 ,CVE-2014-6159 ,CVE-2014-3513 ,CVE-2014-3567 and CVE-2014-3568.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-11-11

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT