Vulnerability Bulletins

IBM Security Bulletin: A SSLv3 POODLE Attack vulnerabilities in IBM SDK for Java shipped by IBM Webshere Application Server shipped with IBM Tivoli/Security Key Lifecycle Manager (CVE-2014-3566)

   
Affected software IBM
 
IBM SDK Java™ Technology Edition, Version 6 and IBM SDK Java™ Technology Edition, Version 5 shipped by IBM Webshere Application Server are shipped as a component of IBM Tivoli/Security Key Lifecycle Manager. Information about a security vulnerability affecting IBM SDK for Java shipped by IBM Webshere Application Server has been published in a security bulletin. CVE(s): Affected product(s) and affected version(s): IBM Tivoli Key Lifecycle Manager - version 1.0 IBM Tivoli Key

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_a_sslv3_poodle_attack_vulnerabilities_in_ibm_sdk_for_java_shipped_by_ibm_webshere_application_server_shipped_with_ibm_tivoli_security_key_lifecycle_manager_cve_2014_3566?lang