Miembros de
Boletines de Vulnerabilidades |
IBM Security Bulletin: WebSphere eXtreme Scale and WebSphere DataPower XC10 Appliance client vulnerability (CVE-2013-6734) |
|
Información sobre el sistema |
|
| Software afectado | IBM |
Descripción |
|
|
In certain configurations, a security vulnerability exists in WebSphere eXtreme Scale Client, the client that is used with WebSphere eXtreme Scale and WebSphere DataPower XC10 Appliance. WebSphere eXtreme Scale Client might allow cached HTTP session data of one user to be accessed by a different user when both users access the same web container. CVE(s): CVE-2013-6734 Affected product(s) and affected version(s): WebSphere eXtreme Scale V7.1.0 WebSphere eXtreme Scale V7.1.1 WebSphere More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_websphere_extreme_scale_and_websphere_datapower_xc10_appliance_client_vulnerability_cve_2013_6734?lang=en_us |
|
Identificadores estándar |
|
| Propiedad | Valor |
| CVE | CVE-2013-6734 ,CVE-2014-0890 and CVE-2013-6731. |
Histórico de versiones |
||
| Versión | Comentario | Fecha |
| 1.0 | Advisory issued | 2014-03-05 |