Vulnerability Bulletins

IBM Security Bulletin: There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Versions 6 that is used by IBM Tivoli Netcool Configuration Manager. (CVE-2014

   
Affected software IBM
 
There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6. IBM Tivoli Netcool Configuration Manager is affected by three of these reported issues. The JSSE implementation of Diffie-Helman key exchange vulnerability (CVE-2014-4263) This bulletin also includes CVE-2014-3068, which may allow brute-force private key recovery from Java Certificate Management System (CMS) keystores. Finally (CVE-2014-4244) an unspecified vulnerability related to the security

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_there_are_multiple_vulnerabilities_in_ibm_runtime_environment_java_technology_edition_versions_6_that_is_used_by_ibm_tivoli_netcool_configuration_manager_cve_2014_4263_cve_20