Miembros de
Boletines de Vulnerabilidades |
IBM Security Bulletin: Multiple IBM InfoSphere Information Server components are vulnerable due to the following Castor Library vulnerability (CVE-2014-3004) |
|
Información sobre el sistema |
|
| Software afectado | IBM |
Descripción |
|
|
Castor Library could allow a remote attacker to obtain sensitive information in various IBM Information Server components. This is caused by an XML External Entity Injection (XXE) error when processing XML data. By sending specially-crafted XML data, an attacker could exploit this vulnerability to obtain sensitive information. CVE(s): CVE-2014-3004 Affected product(s) and affected version(s): The following products, running on all supported platforms, are affected: IBM InfoSphere More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_ibm_infosphere_information_server_components_are_vulnerable_due_to_the_following_castor_library_vulnerability_cve_2014_3004?lang=en_us |
|
Identificadores estándar |
|
| Propiedad | Valor |
| CVE | CVE-2014-3004 ,CVE-2014-4844 ,CVE-2014-3508 ,CVE-2014-3509 and CVE-2014-3511. |
Histórico de versiones |
||
| Versión | Comentario | Fecha |
| 1.0 | Advisory issued | 2014-12-18 |