Vulnerability Bulletins |
IBM Security Bulletin: Vulnerability in RC4 stream cipher affects Tivoli Storage Manager FastBack for Workstations (CVE-2015-2808) |
|
| Affected software | IBM |
|
The RC4 “Bar Mitzvah” Attack for SSL/TLS affects Tivoli Storage Manager FastBack for Workstations. The TSM FastBack for Workstations Central Administration Console (CAC) has a security vulnerability in the underlying IBM WebSphere Liberty 8.5.2.2 Server. Tivoli Storage Manager FastBack for Workstations (client) is affected when using WinHttp connections to a remote WebDav backup server. Since the cipher can be negotiated down to RC4 the CAC and client application are both affected. More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_rc4_stream_cipher_affects_tivoli_storage_manager_fastback_for_workstations_cve_2015_2808?lang=en_us |
|