IBM WebSphere Application Server Java Multiple Vulnerabilities

Last Update Date: 30 May 2014 10:12 Release Date: 30 May 2014 2987 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

Two vulnerabilities were identified in IBM WebSphere Application Server, which can be exploited by malicious people to disclose and manipulate certain data.

The vulnerabilities are caused due to a bundled vulnerable version of IBM Java.

Impact

Information Disclosure
Data Manipulation

System / Technologies affected

Versions 6.1.0.0 to 6.1.0.47 and 8.5.0.0 to 8.5.5.2.

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix.
http://www.ibm.com/support/docview.wss?uid=swg21673013

Vulnerability Identifier

CVE-2014-0453
CVE-2014-0460

Source

Secunia
IBM