CVE

Id
73475  
CVE No.
CVE-2014-6176  
Status
Candidate  
Description
IBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5 disregard the SSL setting in the SCA module HTTP import binding and unconditionally select the SSLv3 protocol, which makes it easier for remote attackers to hijack sessions or obtain sensitive information by leveraging the use of a weak cipher.  
Phase
Assigned (20140902)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
688465 73475 CVE-2014-6176 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21690780  View
688466 73475 CVE-2014-6176 AIXAPAR:JR51593  View
688467 73475 CVE-2014-6176 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1JR51593  View
688468 73475 CVE-2014-6176 SECTRACK:1031382  View
688469 73475 CVE-2014-6176 URL:http://www.securitytracker.com/id/1031382  View
688470 73475 CVE-2014-6176 SECTRACK:1031383  View
688471 73475 CVE-2014-6176 URL:http://www.securitytracker.com/id/1031383  View
688472 73475 CVE-2014-6176 XF:ibm-websphere-cve20146176-weak-security(98488)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19061 JVNDB-2014-007936 複数の OS 上で稼働する IBM Tivoli Storage Manager のクライアントの dsmtca におけるスタックベースのバッファオーバーフローの脆弱性 UNIX、Linux および Mac OS X 上で稼働する IBM Tivoli Storage Manager (TSM) のクライアントの dsmtca には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-6184 73475 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007936.html  View