Vulnerability Bulletins

IBM Security Bulletin: Vulnerabilities in GSKit affect InfoSphere BigInsights (CVE-2015-0138, CVE-2015-0159)


System information

   
Affected software IBM

Description

GSKit is an IBM component that is used by InfoSphere BigInsights. The GSKit that is shipped with InfoSphere BigInsights contains multiple security vulnerabilities including the “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability. InfoSphere BigInsights has addressed the applicable CVEs. CVE(s): CVE-2015-0138 and CVE-2015-0159 Affected product(s) and affected version(s): Customers who have Secure Sockets Layer (SSL) support enabled in their

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerabilities_in_gskit_affect_infosphere_biginsights_cve_2015_0138_cve_2015_0159?lang=en_us

Standar resources

Property Value
CVE CVE-2015-0138 ,CVE-2015-0159 ,CVE-2015-1889 ,CVE-2014-3569 ,CVE-2014-3570 ,CVE-2014-3571 ,CVE-2014-3572 ,CVE-2014-8275 ,CVE-2015-0204 ,CVE-2015-0205 ,CVE-2015-0206 ,CVE-2014-6593 ,CVE-2015-0400 and CVE-2015-0410.

Version history

Version Comments Date
1.0 Advisory issued 2015-04-16
Ministerio de Defensa
CNI
CCN
CCN-CERT