Vulnerability Bulletins

IBM Security Bulletin: Vulnerability in RC4 stream cipher affects WebSphere Transformation Extender Secure Adapter Collection (CVE-2015-2808)


System information

   
Affected software IBM

Description

The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM WebSphere Transformation Extender Secure Adapter Collection. CVE(s): CVE-2015-2808 Affected product(s) and affected version(s): IBM WebSphere Transformation Extender Secure Adapters Collection 8.4.1.1 and 8.4.1.2 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21883021 X-Force Database:

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_rc4_stream_cipher_affects_websphere_transformation_extender_secure_adapter_collection_cve_2015_2808?lang=en_us

Standar resources

Property Value
CVE CVE-2015-2808.

Version history

Version Comments Date
1.0 Advisory issued 2015-04-24
Ministerio de Defensa
CNI
CCN
CCN-CERT