Vulnerability Bulletins |
IBM Security Bulletin: Vulnerability in IBM WebSphere Application Server affects IBM Security Access Manager for Web (CVE-2015-0138) |
|
| Affected software | IBM |
|
The “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability affects IBM WebSphere Application Server Liberty Profile Version 8.5.5.4 that is used by IBM Security Access Manager for Web. CVE(s): CVE-2015-0138 Affected product(s) and affected version(s): IBM Security Access Manager for Web 8.0, firmware versions 8.0.0.2, 8.0.0.3, 8.0.0.4, 8.0.0.5, and 8.0.1.0. Refer to the following reference URLs for remediation and additional vulnerability More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_ibm_websphere_application_server_affects_ibm_security_access_manager_for_web_cve_2015_0138?lang=en_us |
|