Boletines de Vulnerabilidades

IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK including Logjam affect IBM Workload Deployer. (CVE-2015-2590, CVE-2015-2613, CVE-2015-2601, CVE-2015-2625, CVE-2015-1931, and CVE-2015-


Información sobre el sistema

   
Software afectado IBM

Descripción

There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Workload Deployer. These issues were disclosed as part of the IBM Java SDK updates in July 2015. This bulletin also addresses the Logjam Attack on TLS connections using the Diffie-Hellman (DH) key exchange protocol affects. CVE(s): CVE-2015-2590, CVE-2015-2613, CVE-2015-2601, CVE-2015-2625, CVE-2015-1931 and CVE-2015-4000 Affected product(s) and affected version(s): IBM Workload Deployer

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_ibm_java_sdk_including_logjam_affect_ibm_workload_deployer_cve_2015_2590_cve_2015_2613_cve_2015_2601_cve_2015_2625_cve_2015_1931_and_cve_2015_4000

Identificadores estándar

Propiedad Valor
CVE CVE-2015-2590 ,CVE-2015-2613 ,CVE-2015-2601 ,CVE-2015-2625 ,CVE-2015-1931 and CVE-2015-4000.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2015-12-03

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT