Vulnerability Bulletins |
IBM Security Bulletin: Multiple vulnerabilities impact DS8000 HMC |
|
| Affected software | IBM |
|
There are multiple vulnerabilities in the DS8000 HMC which are covered in this bulletin. These include: * The Padding Oracle On Downgraded Legacy Encryption (POODLE) SSLv3 vulnerability (CVE-2014-3566). * Multiple vulnerabilities in OpenSSL that were disclosed on October 15, 2014 by the OpenSSL Project. OpenSSL is used by DS8000 HMC. * Multiple vulnerabilities in IBM Runtime Environment Java Technology Edition that is used by DS8000 HMC. These issues were disclosed as part of the IBM Java SDK More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_impact_ds8000_hmc?lang=en_us |
|