Vulnerability Bulletins |
IBM Security Bulletin: Vulnerabiltiies in OpenSSL affect IBM SONAS (CVE-2014-3513, CVE-2014-3567, CVE-2014-3568) |
|
| Affected software | IBM |
|
OpenSSL vulnerabilities along with SSL 3 Fallback protection (TLS_FALLBACK_SCSV) were disclosed on October 15, 2014 by the OpenSSL Project. OpenSSL is used by IBM SONAS. IBM SONAS has addressed the applicable CVEs and included the SSL 3.0 Fallback protection (TLS_FALLBACK_SCSV) provided by OpenSSL CVE(s): CVE-2014-3513, CVE-2014-3567 and CVE-2014-3568 Affected product(s) and affected version(s): IBM SONAS, all releases, use OpenSSL that is affected by this vulnerability. Refer to More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerabiltiies_in_openssl_affect_ibm_sonas_cve_2014_3513_cve_2014_3567_cve_2014_3568?lang=en_us |
|