Vulnerability Bulletins

IBM Security Bulletin: TLS padding vulnerability affects IBM Security Access Manager for DataPower (CVE-2014-8730)

   
Affected software IBM
 
IBM Security Access Manager version 8.0.0.5 for DataPower is affected by a TLS padding vulnerability, which could allow a remote attacker to obtain sensitive information. CVE(s): CVE-2014-8730 Affected product(s) and affected version(s): IBM Security Access Manager version 8.0.0.5 for DataPower in all WebSphere DataPower Gateway appliances version 7.1.0. Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin:

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_tls_padding_vulnerability_affects_ibm_security_access_manager_for_datapower_cve_2014_8730?lang=en_us