Vulnerability Bulletins

IBM Security Bulletin: Vulnerability in RC4 stream cipher affects IBM WebSphere Sensor Events and IBM Real-Time Asset Locator (CVE-2015-2808)


System information

   
Affected software IBM

Description

The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM WebSphere Application Server that is used by IBM WebSphere Sensor Events and IBM Real-Time Asset Locator. CVE(s): CVE-2015-2808 Affected product(s) and affected version(s): Affected Product and Version(s) Product and Version shipped as a component WebSphere Sensor Events version 7.0 IBM WebSphere Application Server version 7.0 IBM Real-Time Asset Locator version 7.1 IBM WebSphere Application Server version 7.0

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_rc4_stream_cipher_affects_ibm_websphere_sensor_events_and_ibm_real_time_asset_locator_cve_2015_2808?lang=en_us

Standar resources

Property Value
CVE

Version history

Version Comments Date
1.0 Advisory issued 2015-04-24
Ministerio de Defensa
CNI
CCN
CCN-CERT