Miembros de
Boletines de Vulnerabilidades |
Security Bulletin: WebSphere Dashboard Framework contains a vulnerability that allows file access and deletion. |
|
Información sobre el sistema |
|
| Software afectado | IBM |
Descripción |
|
|
WebSphere Dashboard Framework contains a vulerability in a charting feature used to access and delete generated images in a temporary folder. A fix has been created that removes the vulnerability. CVE(s): CVE-2013-6728 Affected product(s) and affected version(s): WebSphere Dashboard Framework versions 6.1.5 and 7.0.1. Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21663022 X-Force More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_websphere_dashboard_framework_contains_a_vulnerability_that_allows_file_access_and_deletion?lang=en_us |
|
Identificadores estándar |
|
| Propiedad | Valor |
| CVE | CVE-2013-6728 ,CVE-2014-0830 ,CVE-2014-0831 ,CVE-2014-0832 and CVE-2014-0833. |
Histórico de versiones |
||
| Versión | Comentario | Fecha |
| 1.0 | Advisory issued | 2014-02-13 |