Boletines de Vulnerabilidades

Security Bulletin: IBM Algo One Capital Workflow Manager is affected by OpenSAML XML information disclosure (CVE-2013-6440)


Información sobre el sistema

   
Software afectado IBM

Descripción

A version of OpenSAML shipped with IBM Algo One Capital Workflow Manager could allow a remote authenticated attacker to obtain sensitive information. CVE(s): CVE-2013-6440 Affected product(s) and affected version(s): IBM Algo One CWM 5.0.0 IBM Algo One CWM 4.9.0 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21677289

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_algo_one_capital_workflow_manager_is_affected_by_opensaml_xml_information_disclosure_cve_2013_6440?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2013-6440 ,CVE-2014-0224 ,CVE-2014-0107 ,CVE-2014-0076 ,CVE-2014-0423 and CVE-2013-4322.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-06-27

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT