Boletines de Vulnerabilidades

IBM Security Bulletin: Remote code execution vulnerability in the Jazz Team Server component of IBM Security AppScan Enterprise (CVE-2014-0862)


Información sobre el sistema

   
Software afectado IBM

Descripción

A high risk vulnerability has been identified in the Jazz Team Server component affecting IBM Security AppScan Enterprise. The exposure would allow a remote attacker to execute arbitrary code on the server. CVE(s): CVE-2014-0862 Affected product(s) and affected version(s): IBM Security AppScan Enterprise 8.8 IBM Security AppScan Enterprise 8.7 IBM Rational AppScan Enterprise 8.6 IBM Rational AppScan Enterprise 8.5 Refer to the following reference URLs for remediation and additional

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_remote_code_execution_vulnerability_in_the_jazz_team_server_component_of_ibm_security_appscan_enterprise_cve_2014_0862?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2014-0862 ,CVE-2014-0411 ,CVE-2013-4002 and CVE-2014-0879.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-03-20

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT