Boletines de Vulnerabilidades

IBM Security Bulletin: Obtain information vulnerability affects IBM B2B Advanced Communications (CVE-2015-7410)

   
Software afectado IBM
 
IBM B2B Advanced Communications is vulnerable to cookie hijacking for Web Services hosted over HTTPS protocol due to weaker than expected security. This could allow an attacked to obtain sensitive information using man-in-the-middle techniques. CVE(s): CVE-2015-7410 Affected product(s) and affected version(s): IBM B2B Advanced Communications 1.0.0.3 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin:

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_obtain_information_vulnerability_affects_ibm_b2b_advanced_communications_cve_2015_7410?lang=en_us