Vulnerability Bulletins

IBM Security Bulletin: Vulnerability in SSLv3 affects Tivoli Provisioning Manager for OS Deployment and Tivoli Provisioning Manager for Images (CVE-2014-3566)

   
Affected software IBM
 
SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption (POODLE) attack. SSLv3 is enabled in Tivoli Provisioning Manager for Operating System Deployment and Tivoli Provisioning Manager for Images. CVE(s): CVE-2014-3566 Affected product(s) and affected version(s): IBM Tivoli Provisioning Manager for Images 7.1.x IBM Tivoli Provisioning Manager for OS Deployment 7.1.x IBM Tivoli Provisioning Manager for Images (and System X Edition) 7.1.x

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_sslv3_affects_tivoli_provisioning_manager_for_os_deployment_and_tivoli_provisioning_manager_for_images_cve_2014_3566?lang=en_us