Vulnerability Bulletins |
IBM Security Bulletin for IBM Integration Bus and WebSphere Message Broker: Multiple security vulnerabilities in IBM JREs 6 & 7 |
|
| Affected software | IBM |
|
Multiple security vulnerabilities exist in the IBM Java™ Runtime Environment component of WebSphere Message Broker for IBM JRE 6 SR16 (and earlier) and the IBM Java Runtime Environment component of IBM Integration Bus for JRE 7 SR7 (and earlier). This also includes a fix for the Padding Oracle On Downgraded Legacy Encryption (POODLE) SSLv3 vulnerability (CVE-2014-3566). These were disclosed as part of the IBM Java SDK updates in October 2014 CVE(s): CVE-2014-3566, CVE-2014-6457, More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_for_ibm_integration_bus_and_websphere_message_broker_multiple_security_vulnerabilities_in_ibm_jres_6_71?lang=en_us |
|