Vulnerability Bulletins |
IBM Security Bulletin: Vulnerabilities in GSKit affect Host On-Demand (CVE-2015-0138) |
|
| Affected software | IBM |
|
GSKit is an IBM component that is used by Host On-Demand.The GSKit that is shipped with Host On-Demand contains multiple security vulnerabilities including the “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability. Host On-Demand has addressed the applicable CVEs. CVE(s): CVE-2015-0138 Affected product(s) and affected version(s): Host On Demand 11.0.12 and earlier Refer to the following reference URLs for remediation and additional More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerabilities_in_gskit_affect_host_on_demand_cve_2015_0138?lang=en_us |
|