Boletines de Vulnerabilidades

IBM Security Bulletin: Multiple vulnerabilities in IBMs Java 5 and Java 6 JREs used by Web Experience Factory, Websphere Dashboard Framework, and Lotus Widget Factory development components.


Información sobre el sistema

   
Software afectado IBM

Descripción

Issues disclosed in the Oracle January 2014 Java SE Critical Patch Update may impact the development components of Web Experience Factory, Websphere Dashboard Framework, and Lotus Widget Factory. The relevant patched vulnerabilities are CVE-2014-0423 (CVSS 5.5), CVE-2014-0416 (CVSS 5) , and CVE-2014-0411 (CVSS 4). CVE(s): CVE-2014-0423, CVE-2014-0416 and CVE-2014-0411 Affected product(s) and affected version(s): All supported versions of Web Experience Factory, WebSphere Dashboard

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_ibm_s_java_5_and_java_6_jres_used_by_web_experience_factory_websphere_dashboard_framework_and_lotus_widget_factory_development_components?lang=en_

Identificadores estándar

Propiedad Valor
CVE CVE-2014-0423 ,CVE-2014-0416 and CVE-2014-0411.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-03-17

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT