Boletines de Vulnerabilidades

IBM Security Bulletin: IBM Sterling Order Management and IBM Sterling Configure, Price, Quote are affected by Apache Struts 2 security vulnerabilities (CVE-2013-4310, CVE-2013-4316, CVE-2013-2251, CVE


Información sobre el sistema

   
Software afectado IBM

Descripción

IBM Sterling Order Management and IBM Sterling Configure Price Quote use Apache Struts 2 and are affected by some of the vulnerabilities that exist in Apache Struts 2. CVE(s): CVE-2013-4310, CVE-2013-4316, CVE-2013-2251, CVE-2013-2248, CVE-2013-2135, CVE-2013-2134, CVE-2013-2115, CVE-2013-1966 and CVE-2013-1965 Affected product(s) and affected version(s): Sterling Order Management 8.5 IBM Sterling Selling and Fulfillment Foundation 9.0 IBM Sterling Selling and Fulfillment Foundation

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_sterling_order_management_and_ibm_sterling_configure_price_quote_are_affected_by_apache_struts_2_security_vulnerabilities_cve_2013_4310_cve_2013_4316_cve_2013_2251_cve_20

Identificadores estándar

Propiedad Valor
CVE

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-03-04

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT