Skip to content

CVE-2014-0852

IBM WebSphere DataPower SOA appliances through 4.0.2.15, 5.x through 5.0.0.17, 6.0.0.x through 6.0.0.9, and 6.0.1.x through 6.0.1.5 make it easier for remote attackers to obtain a PreMasterSecret value and defeat cryptographic protection mechanisms by sending a large number of requests in an SSL/TLS side-channel timing attack.

Ver en NVD

Severidad

N/A

EPSS

Probabilidad de explotación (próx. 30 días): 0.0041 (0.4%)
Percentil: 61.2%
EPSS: 2026-05-06

Afecta

ibm:websphere_datapower_soa_appliance_firmwareibm:websphere_datapower_soa_appliance

Descripción técnica

IBM WebSphere DataPower SOA appliances through 4.0.2.15, 5.x through 5.0.0.17, 6.0.0.x through 6.0.0.9, and 6.0.1.x through 6.0.1.5 make it easier for remote attackers to obtain a PreMasterSecret value and defeat cryptographic protection mechanisms by sending a large number of requests in an SSL/TLS side-channel timing attack.

Publicada: 16/8/2014, 4:39:55
Última modificación: 6/5/2026, 22:30:45

Referencias

InicioEventosBlogRecursosEquipo