Vulnerability Bulletins

IBM Security Bulletin: TLS padding vulnerability affects IBM Security SiteProtector (CVE-2014-8730)

   
Affected software IBM
 
Transport Layer Security (TLS) padding vulnerability via a POODLE (Padding Oracle On Downgraded Legacy Encryption) like attack affects IBM Security SiteProtector System and IBM Security SiteProtector Appliance. CVE(s): CVE-2014-8730 Affected product(s) and affected version(s): IBM Security SiteProtector System versions 3.0, 3.1 and 3.1.1 IBM Security SiteProtector Appliance versions SP2001 and SP3001 (these appliances are vulnerable if they are using SiteProtector versions 3.0, 3.1 or

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_tls_padding_vulnerability_affects_ibm_security_siteprotector_cve_2014_8730?lang=en_us