Vulnerability Bulletins

IBM Security Bulletin: Vulnerability in SSLv3 affects IBM InfoSphere Optim Query Workload Tuner for DB2 for Linux, UNIX and Windows(CVE-2014-3566)

   
Affected software IBM
 
SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption (POODLE) attack. SSLv3 is enabled in IBM InfoSphere Optim Query Workload Tuner for DB2 for Linux, UNIX and Windows. CVE(s): CVE-2014-3566 Affected product(s) and affected version(s): IBM InfoSphere Optim Query Workload Tuner for DB2 for Linux, UNIX and Windows 4.1.1 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin:

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_sslv3_affects_ibm_infosphere_optim_query_workload_tuner_for_db2_for_linux_unix_and_windows_cve_2014_3566?lang=en_us