Miembros de
Boletines de Vulnerabilidades |
IBM Security Bulletin: ClassLoader manipulation with Apache Struts affecting Tivoli Storage Productivity Center (CVE-2014-0114) |
|
Información sobre el sistema |
|
| Software afectado | IBM |
Descripción |
|
|
There is a ClassLoader manipulation vulnerability in Apache Struts that is used by Tivoli Integrated Portal (TIP) and its embedded WebSphere Application Server (eWAS). This vulnerability only affects Tivoli Integrated Portal and does not affect other areas of Tivoli Storage Productivity Center or other instances of embedded WebSphere Application Server within it. CVE(s): CVE-2014-0114 Affected product(s) and affected version(s): Tivoli Integrated Portal (TIP) version 1.x and version 2.x, More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_classloader_manipulation_with_apache_struts_affecting_tivoli_storage_productivity_center_cve_2014_0114?lang=en_us |
|
Identificadores estándar |
|
| Propiedad | Valor |
| CVE | CVE-2014-0114 and CVE-2013-6747. |
Histórico de versiones |
||
| Versión | Comentario | Fecha |
| 1.0 | Advisory issued | 2014-06-15 |