Vulnerability Bulletins |
IBM Security Bulletin: Vulnerability in SSLv3 affects IBM Connections (CVE-2014-3566) |
|
| Affected software | IBM |
|
SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption (POODLE) attack, which is a man-in-the-middle attack affecting Web browsers. IBM Connections utilizes IBM WebSphere Application Server and IBM HTTP Server which enable SSLv3 by default. CVE(s): CVE-2014-3566 Affected product(s) and affected version(s): The following versions of IBM Connections are impacted: IBM Connections 5.0 IBM Connections 4.5 IBM Connections 4.0 IBM More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_sslv3_affects_ibm_connections_cve_2014_3566?lang=en_us |
|