Boletines de Vulnerabilidades

IBM Security Bulletin: IBM QRadar Security Information and Event Manager 7.0 MR5 is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298


Información sobre el sistema

   
Software afectado IBM

Descripción

Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. CVE(s): CVE-2014-0224, CVE-2014-0198 and CVE-2010-5298 Affected product(s) and affected version(s): IBM QRadar Security Information and Event Manager (SIEM) 7.0 MR5 Patch 9 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21678400 X-Force Database:

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_qradar_security_information_and_event_manager_7_0_mr5_is_affected_by_the_following_openssl_vulnerabilities_cve_2014_0224_cve_2014_0198_cve_2010_5298?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2014-0224 ,CVE-2014-0198 ,CVE-2010-5298 ,CVE-2014-0221 ,CVE-2014-3470 ,CVE-2014-0098 ,CVE-2014-0050 and CVE-2014-0411.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-07-09

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT