Vulnerability Bulletins

IBM Security Bulletin: TLS padding vulnerability affects IBM Security Access Manager for Web (CVE-2014-8730)

   
Affected software IBM
 
Transport Layer Security (TLS) padding vulnerability via a POODLE (Padding Oracle On Downgraded Legacy Encryption) like attack affects IBM Security Access Manager for Web. CVE(s): CVE-2014-8730 Affected product(s) and affected version(s): IBM Tivoli Access Manager for e-business versions 6.0, 6.1, 6.1.1 IBM Security Access Manager for Web version 7.0 software IBM Security Access Manager for Web version 7.0 appliance, all firmware versions IBM Security Access Manager for Web version

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_tls_padding_vulnerability_affects_ibm_security_access_manager_for_web_cve_2014_8730?lang=en_us