Boletines de Vulnerabilidades

IBM Security Bulletin:Multiple vulnerabilities in IBM Java SDK affect Sytem Storage DS8000


Información sobre el sistema

   
Software afectado IBM

Descripción

Multiple vulnerabilities exisit in the IBM JRE used by System Storage DS8000. These were disclosed as part of the IBM Java SDK updates - July 2015 This release also enforces the removal of RC4 in IBM JAVA (CVE-2015-2808) also known as BarMitzva to ensure that no present or future releases can enable ciphers which use RC4. This is an additional safeguard. CVE(s): CVE-2015-2613, CVE-2015-2601, CVE-2015-2625, CVE-2015-1931 and CVE-2015-2808 Affected product(s) and affected version(s):

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_ibm_java_sdk_affect_sytem_storage_ds8000?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2015-2808 ,CVE-2015-2613 ,CVE-2015-2601 ,CVE-2015-2625 and CVE-2015-1931.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2015-11-24

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT