Vulnerability Bulletins |
IBM Security Bulletin: Vulnerability in SSLv3 affects IBM Security Access Manager (CVE-2014-3566) |
|
| Affected software | IBM |
|
SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption (POODLE) attack. This affects numerous IBM Security Access Manager for Web and IBM Security Access Manager for Mobile components. CVE(s): CVE-2014-3566 Affected product(s) and affected version(s): IBM Security Access Manager for Web 7.0, 8.0, firmware versions 8.0.0.2, 8.0.0.3, 8.0.0.4, and 8.0.0.5 IBM Security Access Manager for Mobile 8.0, firmware versions 8.0.0.1 8.0.0.3, More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_sslv3_affects_ibm_security_access_manager_cve_2014_35661?lang=en_us |
|