Vulnerability Bulletins |
IBM Security Bulletin: Vulnerability in RC4 stream cipher affects WebSphere Application Server (CVE-2015-2808) |
|
| Affected software | IBM |
|
The RC4 "Bar Mitzvah" for SSL/TLS may affect some configurations of WebSphere Application Server. NOTE: If you are configured for FIPS140-2, Suite B or SP800-131 in your Security>SSL certificate and key management then you are not affected by this vulnerability or your SSL communication for Liberty. CVE(s): CVE-2015-2808 Affected product(s) and affected version(s): The following Versions of WebSphere Application Server may be affected: Version 8.5 and 8.5.5 Full Profile More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_rc4_stream_cipher_affects_websphere_application_server_cve_2015_2808?lang=en_us |
|