CVEvulnerability
CVE-2014-0852
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
IBM WebSphere DataPower SOA appliances through 4.0.2.15, 5.x through 5.0.0.17, 6.0.0.x through 6.0.0.9, and 6.0.1.x through 6.0.1.5 make it easier for remote attackers to obtain a PreMasterSecret value and defeat cryptographic protection mechanisms by sending a large number of requests in an SSL/TLS side-channel timing attack.
Affected configurations
• ibm websphere datapower soa appliance firmware (<= 4.0.2.15)
• ibm websphere datapower soa appliance firmware 5.0.0
• ibm websphere datapower soa appliance firmware 6.0.0
• ibm websphere datapower soa appliance firmware 6.0.1
• ibm websphere datapower soa appliance
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/60112 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT01111 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21678204 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90753 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/60112 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT01111 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21678204 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90753 exchange.xforce.ibmcloud.com