CVE-2014-0852

Published: Aug 16, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

IBM WebSphere DataPower SOA appliances through 4.0.2.15, 5.x through 5.0.0.17, 6.0.0.x through 6.0.0.9, and 6.0.1.x through 6.0.1.5 make it easier for remote attackers to obtain a PreMasterSecret value and defeat cryptographic protection mechanisms by sending a large number of requests in an SSL/TLS side-channel timing attack.

Affected (5)

Products: Ibm: Websphere Datapower Soa Appliance Firmware, Websphere Datapower Soa Appliance

Ibm

2 products

Websphere Datapower Soa Appliance Firmware

Websphere Datapower Soa Appliance

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Datapower Soa Appliance Firmware	Up to 4.0.2.15
Ibm Websphere Datapower Soa Appliance Firmware	Version 5.0.0
Ibm Websphere Datapower Soa Appliance Firmware	Version 6.0.0
Ibm Websphere Datapower Soa Appliance Firmware	Version 6.0.1
Ibm Websphere Datapower Soa Appliance	All versions