Boletines de Vulnerabilidades

IBM Security Bulletin: Vulnerability in RubyGems rest-client affects IBM License Metric Tool and IBM Endpoint Manager for Software Use Analysis (CVE-2015-1820)


Información sobre el sistema

   
Software afectado IBM

Descripción

RubyGems rest-client component vulnerability allows for hijacking user session. CVE(s): CVE-2015-1820 Affected product(s) and affected version(s): IBM License Metric Tool v9 IBM Endpoint Manager for Software Use Analysis v9 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21902316 X-Force Database: http://exchange.xforce.ibmcloud.com/vulnerabilities/101837

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_rubygems_rest_client_affects_ibm_license_metric_tool_and_ibm_endpoint_manager_for_software_use_analysis_cve_2015_1820?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2015-1820 ,CVE-2015-4000 ,CVE-2015-1887 ,CVE-2015-1917 ,CVE-2015-1944 ,CVE-2015-3165 ,CVE-2015-3166 and CVE-2015-3167.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2015-06-30

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT