Boletines de Vulnerabilidades

IBM Security Bulletin: IBM Platform Cluster Manager (CVE-2014-0094, CVE-2014-0112, CVE-2014-0113, CVE-2014-0116)


Información sobre el sistema

   
Software afectado IBM

Descripción

Several security vulnerabilities have been reported against Apache Struts 2 through May 2014. IBM Platform Cluster Manager’s GUI uses Struts 2 as a framework for Java web applications. A version of the package that is vulnerable to these issues is included in several past versions of IBM Platform Cluster Manager. The latest versions of Struts 2 address all the vulnerabilities and can be applied through the fix detailed in the Remediation section. CVE(s): CVE-2014-0094, CVE-2014-0112,

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_platform_cluster_manager_cve_2014_0094_cve_2014_0112_cve_2014_0113_cve_2014_0116?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2014-0094 ,CVE-2014-0112 ,CVE-2014-0113 ,CVE-2014-0116 ,CVE-2014-0935 ,CVE-2014-0907 ,CVE-2014-0092 and CVE-2014-0050.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-06-02

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT