Vulnerability Bulletins

IBM Security Bulletin: Vulnerabilities in GSKit affect Tivoli Workload Scheduler (CVE-2015-0159, CVE-2015-0138, CVE-2014-6221)

   
Affected software IBM
 
GSKit is an IBM component that is used by Tivoli Workload Scheduler. The GSKit that is shipped with Tivoli Workload Scheduler contains multiple security vulnerabilities including the “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability. Tivoli Workload Scheduler has addressed the CVEs. CVE(s): CVE-2014-6221, CVE-2015-0138 and CVE-2015-0159 Affected product(s) and affected version(s): Tivoli Workload Scheduler Distributed 8.5.1 FP05 and earlier

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerabilities_in_gskit_affect_tivoli_workload_scheduler_cve_2015_0159_cve_2015_0138_cve_2014_6221?lang=en_us