Vulnerability Bulletins |
Security Bulletin: Vulnerabilities in SSLv3 and OpenSSL affects Virtual Server Protection for VMware (CVE-2014-3566, CVE-2014-3567, CVE-2014-3568) |
|
| Affected software | IBM |
|
SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption (POODLE) attack. SSLv3 is enabled in IBM Security Virtual Server Protection for VMware. Also, OpenSSL vulnerabilities were disclosed on October 15, 2014 by the OpenSSL Project. OpenSSL is used by IBM Security Virtual Server Protection for VMware. IBM Security Virtual Server Protection for VMware has addressed the applicable CVEs. CVE(s): CVE-2014-3566, CVE-2014-3567 and CVE-2014-3568 More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_vulnerabilities_in_sslv3_and_openssl_affects_virtual_server_protection_for_vmware_cve_2014_3566_cve_2014_3567_cve_2014_3568?lang=en_us |
|