Vulnerability Bulletins |
IBM Security Bulletin: FREAK vulnerability fixed in Liberty for Java for IBM Bluemix (CVE-2015-0138) |
|
| Affected software | IBM |
|
The “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability affects IBM® Runtime Environment Java™ Technology Edition, Version 7.1 that is used by Liberty for Java for IBM Bluemix. CVE(s): CVE-2015-0138 Affected product(s) and affected version(s): This vulnerability affects all versions of Liberty for Java in IBM Bluemix up to and including v1.13-20150209-1122. Refer to the following reference URLs for remediation and additional More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_freak_vulnerability_fixed_in_liberty_for_java_for_ibm_bluemix_cve_2015_0138?lang=en_us |
|