165 matches found
Security Bulletin: IBM Security SiteProtector System is affected by Apache HTTP Server vulnerabilities
Summary IBM Security SiteProtector System has addressed the following vulnerabilities in Apache HTTP Server. Vulnerability Details CVEID: CVE-2019-10092 DESCRIPTION: In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacke...
Security Bulletin: IBM Security SiteProtector System is affected by Apache HTTP Server vulnerabilities
Summary IBM Security SiteProtector System has addressed the following vulnerabilities in Apache HTTP Server. Vulnerability Details CVEID: CVE-2018-20843 DESCRIPTION: libexpat is vulnerable to a denial of service, caused by an error in the XML parser. By persuading a victim to open a...
Security Bulletin: IBM Security SiteProtector System is affected by Apache HTTP Server vulnerabilities
Summary IBM Security SiteProtector System has addressed the following vulnerabilities in Apache HTTP Server. Vulnerability Details CVEID: CVE-2018-17199 DESCRIPTION: Apache HTTP Server could allow a remote attacker to bypass security restrictions, caused by checking the session expiry time before...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security SiteProtector System
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8.0.5.37 used by IBM Security SiteProtector System. IBM Security SiteProtector System has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-2684 DESCRIPTION: An unspecified vulnerability in...
Security Bulletin: IBM Security SiteProtector System is affected by Apache HTTP Server vulnerabilities
Summary IBM Security SiteProtector System has addressed the following vulnerabilities in Apache HTTP Server. Vulnerability Details CVEID: CVE-2018-11759 DESCRIPTION: Apache Tomcat JK modjk Connector could allow a remote attacker to traverse directories on the system, caused by the improper handli...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security SiteProtector System
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8.0.5.30 used by IBM Security SiteProtector System. IBM Security SiteProtector System has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-3139 DESCRIPTION: An unspecified vulnerability in...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security SiteProtector System
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8.0.5.16 used by IBM Security SiteProtector System. IBM Security SiteProtector System has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-3736 DESCRIPTION: OpenSSL could allow a remote attack...
Security Bulletin: IBM Security SiteProtector System is affected by Apache HTTP Server vulnerabilities
Summary IBM Security SiteProtector System has addressed the following vulnerabilities in Apache HTTP Server. Vulnerability Details CVEID: CVE-2017-12613 DESCRIPTION: Apache Portable Runtime APR could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds array...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security SiteProtector System
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM Security SiteProtector System. These issues were disclosed as part of the IBM Java SDK updates in January 2018 and April 2018. Vulnerability Details CVEID: CVE-2018-2579 DESCRIPTION: An unspecified...
Security Bulletin: IBM Security SiteProtector System is affected by GSKit vulnerabilities
Summary IBM Security SiteProtector System has addressed the following vulnerabilities in GSKit. Vulnerability Details CVEID: CVE-2018-1428 DESCRIPTION: IBM GSKit uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. CVSS Base Scor...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security SiteProtector System
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM Security SiteProtector System. These issues were disclosed as part of the IBM Java SDK updates in October 2017. Vulnerability Details CVEID: CVE-2017-10356 DESCRIPTION: An unspecified vulnerability...
Security Bulletin: IBM Security SiteProtector Appliance has released firmware 1. 26 (for SP3001) and firmware 2.13 (for SP4001) in response to the vulnerabilities known as Spectre and Meltdown.
Summary IBM has released the following firmware 1.26 for SiteProtector SP3001 appliance and firmware 2.13 for SiteProtector SP4001 appliance in response to CVE-2017-5753, CVE-2017-5715 and CVE-2017-5754. Vulnerability Details CVEID: CVE-2017-5753 CVEID: CVE-2017-5715 CVEID: CVE-2017-5754 Affected...
Security Bulletin: IBM Security SiteProtector System is affected by Apache HTTP Server Vulnerabilities
Summary IBM Security SiteProtector System has addressed the following vulnerabilities in Apache HTTP Server. Vulnerability Details CVEID: CVE-2017-7679 DESCRIPTION: Apache HTTPD could allow a remote attacker to obtain sensitive information, caused by a buffer overread in modmime. By sending a...
Security Bulletin: IBM QRadar Network Security is affected by vulnerabilities in bash (CVE-2016-9401, CVE-2016-7543, CVE-2016-0634)
Summary IBM QRadar Network Security has addressed vulnerabilities in bash. Vulnerability Details CVEID: CVE-2016-9401 DESCRIPTION: GNU Bash could allow a local attacker to bypass security restrictions, caused by a use-after-free error. An attacker could exploit this vulnerability using a speciall...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security SiteProtector System
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM Security SiteProtector System. These issues were disclosed as part of the IBM Java SDK updates in Jul 2017. Vulnerability Details CVEID: CVE-2017-10115 DESCRIPTION: An unspecified vulnerability...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security SiteProtector System
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Security SiteProtector System. These issues were disclosed as part of the IBM Java SDK updates in Apr 2017. Vulnerability Details CVEID: CVE-2017-3539 DESCRIPTION: An unspecified vulnerability relat...
Security Bulletin: Multiple vulnerability in IBM Java Runtime affect IBM Security SiteProtector System (CVE-2016-5597 CVE-2016-5546 CVE-2016-5548 CVE-2016-5549 CVE-2016-5547 CVE-2016-2183)
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.7 used by IBM Security SiteProtector System. These issues were disclosed as part of the IBM Java SDK updates in Oct 2016 and Jan 2017. Vulnerability Details CVEID: CVE-2016-5597 DESCRIPTION: An unspecified...
Security Bulletin: A vulnerability in IBM Java Runtime affects IBM Security SiteProtector System (CVE-2016-3426)
Summary There is a vulnerability in IBM® Runtime Environment Java™ Technology Edition, Version 7 that is used by IBM Security SiteProtector System. The issue was disclosed as part of the IBM Java SDK updates in April 2016 Vulnerability Details CVEID: CVE-2016-3426 DESCRIPTION: An unspecified...
Security Bulletin: Multiple vulnerabilities in ApacheTomcat affect IBM Security SiteProtector System (CVE-2015-5174, CVE-2015-5345, CVE-2016-0706 and CVE-2016-0714)
Summary There are multiple vulnerabilities in Apache Tomcat that is used by IBM Security SiteProtector System. Vulnerability Details CVEID: CVE-2015-5174 DESCRIPTION: Apache Tomcat could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security SiteProtector System (CVE-2016-0483 and CVE-2015-7575)
Summary There are multiple vulnerabilities in IBM® Java™ Runtime, Version 7 that is used by IBM Security SiteProtector System. These issues were disclosed as part of the IBM Java SDK updates in January 2016 and includes the vulnerability commonly referred to as "SLOTH". Vulnerability Details CVEI...