Vulnerability Bulletins

IBM Security Bulletin: Vulnerability in IBM Java SDK affects Host On-Demand (CVE-2015-0138)

   
Affected software IBM
 
The “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability affects IBM® SDK Java™ Technology Edition, Version IBM JRE 1.7 SR6 that is used by Host On-Demand. CVE(s): CVE-2015-0138 Affected product(s) and affected version(s): Host On-Demand 11.0.9 -11.0.13 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21700261 X-Force

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_ibm_java_sdk_affects_host_on_demand_cve_2015_0138?lang=en_us