Vulnerability Bulletins |
IBM Security Bulletin: IBM Endpoint Manager Platform 9.0 is affected by two OpenSSL vulnerabilities and the "POODLE" vulnerability |
|
| Affected software | IBM |
|
Vulnerabilities have been discovered in the OpenSSL libraries used by IBM Endpoint Manager 9.0. Two of these vulnerabilities could allow attackers to create a denial of services attack or to craft a man-in-middle attack to hijack sessions or to get sensitive information. Attackers could also hijack a browser session to gain sensitive session information using the "POODLE" attack. CVE(s): CVE-2014-3567, CVE-2014-0224 and CVE-2014-3566 Affected product(s) and affected version(s): More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_endpoint_manager_platform_9_0_is_affected_by_two_openssl_vulnerabilities_and_the_poodle_vulnerability?lang=en_us |
|