Boletines de Vulnerabilidades

IBM Security Bulletin: Vulnerability in Open Source Apache Tomcat affect the IBM® FlashSystem™ V840, (CVE-2014-0227)


Información sobre el sistema

   
Software afectado IBM

Descripción

There is a vulnerability in Open Source Apache Tomcat that is used by the IBM FlashSystem V840 which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service under error scenarios. CVE(s): CVE-2014-0227 Affected product(s) and affected version(s): FlashSystem V840 including machine type and models (MTMs) for all available code levels. MTMs affected include 9846-AE1, 9848-AE1, 9846-AC0, 9848-AC0, 9846-AC1, and 9848-AC1. The Service Assist GUI is the

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_open_source_apache_tomcat_affect_the_ibm_flashsystem_v840_cve_2014_0227?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2014-0227 ,CVE-2015-0488 ,CVE-2015-0478 ,CVE-2015-2808 ,CVE-2015-1916 ,CVE-2015-0209 ,CVE-2015-0286 ,CVE-2015-0289 ,CVE-2014-3569 ,CVE-2014-3570 ,CVE-2014-3572 ,CVE-2014-8275 ,CVE-2015-0204 and CVE-2015-0205.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2015-08-07

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT