Security Bulletin: Vulnerability in SSLv3 affects IBM Monitoring and Diagnostic Tools for Java - Interactive Diagnostic Data Explorer (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 may be used in connections between Interactive Diagnostic Data Explorer client and the server running in IBM Support Assistant Team Server Vulnerability...

CVE-2013-0564: IBM InfoSphere Data Explorer cross-site request forgery

CVE-2013-0564 concerns IBM InfoSphere Data Explorer and describes a cross-site request forgery (CSRF) vulnerability due to insufficient safeguards. An attacker can lure a legitimate, already-authenticated user to open a URL that executes an action on behalf of that user, potentially without the u...

CVE-2013-0561: IBM InfoSphere Data Explorer information disclosure

CVE-2013-0561 affects IBM InfoSphere Data Explorer where some SSL pages are incorrectly cached. An attacker who can access cached pages viewed by a legitimate user may view sensitive information from those pages. The description notes cacheability issue but does not provide exploitation details o...