Miembros de
Boletines de Vulnerabilidades |
IBM Security Bulletin: Denial of Service attack possible on Cúram instances using Apache Santuario (CVE-2013-4517) |
|
Información sobre el sistema |
|
| Software afectado | IBM |
Descripción |
|
|
A version of Apache Santuario XML Security for Java shipped with Cúram is vulnerable to a denial of service attack. Customers that use xmlsec.jar to secure web services may be affected. CVE(s): CVE-2013-4517 Affected product(s) and affected version(s): Cúram Social Program Management All products are affected when running code releases 5.0, 5.2, 5.2 SP1, 5.2 SP4, 5.2 SP4 DE, 5.2 SP5, 5.2 SP6, 6.0 SP2, 6.0.3.0, 6.0.4.0, 6.0.4.3, 6.0.4.4, 6.0.4.5, 6.0.5.2, 6.0.5.3, 6.0.5.4. More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_denial_of_service_attack_possible_on_c%25C3%25BAram_instances_using_apache_santuario_cve_2013_4517?lang=en_us |
|
Identificadores estándar |
|
| Propiedad | Valor |
| CVE | |
Histórico de versiones |
||
| Versión | Comentario | Fecha |
| 1.0 | Advisory issued | 2014-06-11 |