Miembros de
Boletines de Vulnerabilidades |
IBM Security Bulletin: Vulnerability in Castor library affects IBM Cúram(CVE-2014-3004) |
|
| Software afectado | IBM |
|
IBM Cúram is shipped with a third party library called Castor, which is vulnerable to an XML External Entity Injection (XXE) error. CVE(s): CVE-2014-3004 Affected product(s) and affected version(s): IBM Cúram Social Program Management 4.5 IBM Cúram Social Program Management 5.2 IBM Cúram Social Program Management 6.0.3 IBM Cúram Social Program Management 6.0.4 IBM Cúram Social Program Management 6.0.5 IBM Cúram Social Program Management More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_castor_library_affects_ibm_c%25C3%25BAram_cve_2014_3004?lang=en_us |
|
