Vulnerability Bulletins |
IBM Security Bulletin: Vulnerabilities in GSKit affect IBM Content Collector for SAP Applications (CVE-2015-0138, CVE-2014-8730) |
|
| Affected software | IBM |
|
GSKit is an IBM component that is used by IBM Content Collector for SAP Applications. The GSKit version that is shipped with IBM Content Collector for SAP Applications contains multiple security vulnerabilities including the “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability, and the Transport Layer Security (TLS) padding vulnerability via a POODLE (Padding Oracle On Downgraded Legacy Encryption) like attack. IBM Content Collector for SAP More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerabilities_in_gskit_affect_ibm_content_collector_for_sap_applications_cve_2015_0138_cve_2014_8730?lang=en_us |
|