Vulnerability Bulletins |
IBM Security Bulletin: Vulnerability in RC4 stream cipher affects IBM Tivoli Security Policy Manager (CVE-2015-2808) |
|
| Affected software | IBM |
|
The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM WebSphere Application Server Full Profile Version 6.1, 7.0 and 8.0 that is used by IBM Tivoli Security Policy Manager. CVE(s): CVE-2015-2808 Affected product(s) and affected version(s): · IBM Tivoli Security Policy Manager versions 7.0 and 7.1 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21714189 X-Force More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_rc4_stream_cipher_affects_ibm_tivoli_security_policy_manager_cve_2015_2808?lang=en_us |
|