Security Bulletin: Multiple vulnerabilities affect IBM Security SiteProtector Appliance (CVE-2013-2566, CVE-2014-6321, CVE-2015-0162)

Summary There are multiple vulnerabilities identified in IBM Security SiteProtector Appliance. Vulnerability Details CVEID: CVE-2013-2566 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information, caused by the...

CVE-2015-0162

IBM Security SiteProtector System (SP2001/SP3001/SP4001) is affected by CVE-2015-0162 due to an unquoted Windows search path vulnerability in the SiteProtector components, enabling local privilege elevation for attackers with physical/logical access. The bulletin details that local attackers can ...