Boletines de Vulnerabilidades

IBM Security Bulletin: Vulnerabilities in Ruby on Rails affect IBM License Metric Tool and IBM Endpoint Manager for Software Use Analysis (CVE-2015-3226)
Información sobre el sistema

Software afectado	IBM
Descripción
A vulnerability in ActiveSupport component of Ruby on Rails framework used by IBM License Metric Tool and IBM Endpoint Manager for Software Use Analysis allows for stealing authentication cookies with cross-site scripting attack . CVE(s): CVE-2015-3226 Affected product(s) and affected version(s): IBM License Metric Tool v9 IBM Endpoint Manager for Software Use Analysis v9 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerabilities_in_ruby_on_rails_affect_ibm_license_metric_tool_and_ibm_endpoint_manager_for_software_use_analysis_cve_2015_3226?lang=en_us
Identificadores estándar
Propiedad	Valor
CVE	CVE-2015-3226 ,CVE-2015-4929 and CVE-2015-4000.