Boletines de Vulnerabilidades

IBM Security Bulletin: IBM InfoSphere Information Server sometimes records sensitive data when an installation fails (CVE-2013-5440)


Información sobre el sistema

   
Software afectado IBM

Descripción

In certain situations after a specific error has been encountered and InfoSphere Information Server installation fails, sensitive data is recorded in a file. For releases 8.5 and earlier this vulnerability can occur only when updating an existing installation with maintenance. For releases 8.7and onwards, this vulnerability can occur when performing all types of installations including new installations, adding of components not previously installed and updating an existing installation with

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_infosphere_information_server_sometimes_records_sensitive_data_when_an_installation_fails_cve_2013_5440?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2013-5440 ,CVE-2013-4066 ,CVE-2013-4067 ,CVE-2013-0169 ,CVE-2013-2407 ,CVE-2013-2412 and CVE-2013-4002.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-02-09

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT