Boletines de Vulnerabilidades

IBM Security Bulletin: Rational Reporting for Development Intelligence - Oracle CPU January 2014 (CVE-2014-0416, CVE-2014-0423)


Información sobre el sistema

   
Software afectado IBM

Descripción

Multiple security vulnerabilities exist in the IBM JRE that is shipped with the Rational Reporting for Development Intelligence (RRDI). The same security vulnerabilities also exist in the IBM Java SDK that is shipped with the IBM WebSphere Application Server (WAS). CVE(s): CVE-2014-0416 and CVE-2014-0423 Affected product(s) and affected version(s): RRDI 1.0.2, 1.0.2.1, 2.0, 2.0.0.1, 2.0.1, 2.0.3, 2.0.4, 2.0.5 and 2.0.6 Refer to the following reference URLs for remediation and additional

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_rational_reporting_for_development_intelligence_oracle_cpu_january_2014_cve_2014_0416_cve_2014_0423?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2014-0416 ,CVE-2014-0423 ,CVE-2013-4286 ,CVE-2012-3544 ,CVE-2013-4322 ,CVE-2013-4590 ,CVE-2014-0033 ,CVE-2013-4353 ,CVE-2013-6449 and CVE-2013-6450.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-08-03

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT