Vulnerability Bulletins

IBM Security Bulletin: Vulnerability in SSLv3 Affects Power Hardware Management Console (CVE-2014-3513, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568)

Affected software	IBM

OpenSSL included in Power Hardware Management Console contains multiple vulnerabilities including POODLE (Padding Oracle On Downgraded Legacy Encryption). CVE(s): CVE-2014-3513, CVE-2014-3566, CVE-2014-3567 and CVE-2014-3568 Affected product(s) and affected version(s): Power HMC V7.7.3.0 Power HMC V7.7.7.0 Power HMC V7.7.8.0 Power HMC V7.7.9.0 Power HMC V8.8.1.0 Power HMC V8.8.2.0 Refer to the following reference URLs for remediation and additional vulnerability details: Source More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_sslv3_affects_power_hardware_management_console_cve_2014_3513_cve_2014_3566_cve_2014_3567_cve_2014_3568?lang=en_us

IBM Security Bulletin: Vulnerability in SSLv3 Affects Power Hardware Management Console (CVE-2014-3513, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568)