Vulnerability Bulletins

IBM Security Bulletin: Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager (CVE-2014-8730, CVE-2014-3566)

   
Affected software IBM
 
IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance is affected by a TLS padding vulnerability and SSLv3 vulnerability, which could allow a remote attacker to obtain sensitive information. CVE(s): CVE-2014-8730 and CVE-2014-3566 Affected product(s) and affected version(s): IBM Security Privileged Identity Manager 1.0.1, 1.0.1, 20 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin:

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_security_vulnerabilities_have_been_fixed_in_ibm_security_privileged_identity_manager_cve_2014_8730_cve_2014_3566?lang=en_us