Vulnerability Bulletins |
IBM Security Bulletin: TLS padding vulnerability affects TPM for OS Deployment and TPM for Images (CVE-2014-8730) |
|
| Affected software | IBM |
|
Transport Layer Security (TLS) padding vulnerability via a POODLE (Padding Oracle On Downgraded Legacy Encryption) like attack affects the GSKit component that can be optionally utilized by Tivoli Provisioning Manager for Operating System Deployment (TPM for OSD) and Tivoli Provisioning Manager for Images (TPM for Images). CVE(s): CVE-2014-8730 Affected product(s) and affected version(s): IBM Tivoli Provisioning Manager for Images 7.1.x IBM Tivoli Provisioning Manager for OS Deployment More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_tls_padding_vulnerability_affects_tpm_for_os_deployment_and_tpm_for_images_cve_2014_8730?lang=en_us |
|