Release date:Updated on:
Affected Systems:IBM Tivoli Event Pump 4.xDescription:--------------------------------------------------------------------------------IBM Tivoli Event Pump for z/OS automatically collects and forwards status events of z/OS systems and subsystems, including CICS, IMS, DB2, and third-party products.
IBM Tivoli Event Pump for z/OS saves user creden in plain text in the AOPSCLOG data
information, execute session locating, insert scripts, overwrite arbitrary files, execute cross-site Request Forgery and spoofing attacks, and control affected systems.
1) Some configuration errors can be used to download arbitrary files of local resources;
2) If Windows authentication is enabled, the service account session can be hijacked;
3) errors during job import can be exploited to leak sensitive information;
4) The file url scan error can be exploited to leak sensitive information;
5) A
Release date:Updated on:
Affected Systems:IBM WebSphere Sensor Events 7.xDescription:--------------------------------------------------------------------------------IBM WebSphere Sensor Events is a middleware product platform designed and developed for Sensor solutions.
The IBM WebSphere Sensor Events 7.0 running on AIX (64-bit), Linux, and Windows has multiple vulnerabilities, which can be exploited by mal
Release date: 2011-11-16Updated on: 2011-11-17
Affected Systems:IBM WebSphere MQ 6.xUnaffected system:IBM WebSphere MQ 6.0.2.11Description:--------------------------------------------------------------------------------Bugtraq id: 50693
IBM WebSphere MQ is used to provide message transmission services in enterprises.
IBM WebSphere MQ does not restrict access to some WebSphere MQ control commands. You can
Release date:Updated on:
Affected Systems:IBM WebSphere DataPower XC10 2.xIBM WebSphere eXtreme Scale 8.xDescription:--------------------------------------------------------------------------------Bugtraq id: 56396IBM WebSphere DataPower XC10 is a device that provides GB grid storage. IBM WebSphere eXtreme Scale is a distributed object cache solution in the cloud environment.IBM WebSphere DataPower XC10 and IBM
The IBM System x3650 M3 is a dual-rack server with an Intel Xeon E5606 CPU. It has outstanding performance and excellent scalability. It comes with System management software, it is convenient for users to quickly deploy and is a server that is not very suitable for small and medium-sized enterprises to purchase.
Product aspect:
Intel Xeon E5606 CPU
Dual-rack Server
IBM System x3650 M3
Product Conf
Release date: 2011-10-07Updated on: 2011-10-10
Affected Systems:IBM Rational AppScan 8.xDescription:--------------------------------------------------------------------------------Cve id: CVE-2011-1366, CVE-2011-1367
The Rational AppScan application security software can scan and test all common Web application vulnerabilities at various stages of development.
There are two security vulnerabilities in th
Three security vulnerabilities in IBM Lotus Notes Ichitaro Speed Reader
Release date: 2011-10-07Updated on: 2011-10-10
Affected Systems:IBM Lotus Notes 8.xDescription:--------------------------------------------------------------------------------Cve id: CVE-2011-0337, CVE-2011-0338, CVE-2011-0339
Lotus Domino is an email and cluster platform that integrates email, document database, Rapid Application De
The following issues occurred in the reports generated when using the IBM Security AppScan Standard Scan site (RC4 cipher suite and browser for SSL/TLS are detected with the name Beast)Operating system: Oracle Linux 6.1Middleware: apache-tomcat-7.0.67The problem is as follows:RC4 Cipher Suite Detected650) this.width=650; "Src=" https://s1.51cto.com/wyfs02/M02/8E/F7/wKioL1jQjYyTIMb0AAMEweanHDo872.png-wh_500x
Enterprise-Class Web application Security Solution Example
Objective
We will be from different roles in the enterprise, from the perspective of a developer, security administrator, and department manager, describe in detail how the day-to-day work of each persona is implemented after deploying the IBM Rational ASE Enterprise Web Application
Release date: 2011-12-15Updated on: 2011-12-16
Affected Systems:Ibm aix 6.1.xDescription:--------------------------------------------------------------------------------Bugtraq id: 51083
AIX is an open standard UNIX operating system that provides you with an enterprise information technology infrastructure.
Ibm aix has security vulnerabilities in implementation, and the details are unknown.
Link: http:/
=99999999999999999999Case Two: Login page button parameter, in the request body, did not find the reason???Http://localhost:83/login.aspx entity: Imgbtndl.y (Parameter)16. WebResource.axdWebresources.axd?d=xyz.One feature of WebResource.axd is that it generates 500 errors for the wrong ciphertext (that is, XYZ in d=xyz) and 404 errors for the correct ciphertext, which creates enough hintsResources:Http://www.2cto.com/Article/201009/75162.htmlhttp://pan.baidu.com/share/link?shareid=3851057069uk=2
Release date:Updated on: 2013-03-20
Affected Systems:IBM Business Process Manager 8.xDescription:--------------------------------------------------------------------------------Bugtraq id: 58541IBM Business Process Manager is a comprehensive BPM platform for Business Process management.Unknown details are reported in IBM Business Process Manager 8.0, 8.0.1, and other versions.Link: http://secunia.com/advisories/52718/Http://www-01.ibm.com/support/doc
Problem Description:cause Analysis:The secure attribute of the cookie should be set to True when HTTPS is turned on by the server;Workaround:1. Server configuration HTTPS SSL mode, reference: HTTPS://SUPPORT.MICROSOFT.COM/KB/324069/ZH-CN2. Modify the Web. config to add:see:http://msdn.microsoft.com/en-us/library/ms228262 (v=vs.100). aspx3. Modify the settings cookie when writing cookies in the background. Secure = true:HttpResponse response = HttpContext.Current.Response;var cookie = new HttpCoo
as LDAP, POP, IMAP, Diiop, IBM Lotus QuickPlace? and IBM Lotus Sametime? However, if the password used for authentication is stored in the LDAP server, Internet password locking can also be used in Web access.
If you are using the DSAPI filter, can you use the Internet locking feature because the DSAPI filter can bypass Lotus Notes? and Domino authentication.
For single sign-on (SSO), a Lotus Domino serv
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.