Vulnerability Bulletins |
IBM Security Bulletin: TLS padding vulnerability affects GPFS V4.1 (CVE-2014-8730) |
|
| Affected software | IBM |
|
Transport Layer Security (TLS) padding vulnerability via a POODLE (Padding Oracle On Downgraded Legacy Encryption) like attack affects GPFS V4.1. CVE(s): CVE-2014-8730 Affected product(s) and affected version(s): GPFS 4.1 is the only version affected. Furthermore, customers running GPFS V4.1 are affected by this vulnerability only if 1) cipherList is set to a real cipher (i.e. not AUTHONLY) in order to authenticate and encrypt data passed between nodes/clusters; or 2), if file-level More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_tls_padding_vulnerability_affects_gpfs_v4_1_cve_2014_8730?lang=en_us |
|