Vulnerability Bulletins |
IBM Security Bulletin: Vulnerability in RC4 stream cipher affects WebSphere Voice Response for AIX (CVE-2015-2808) |
|
| Affected software | IBM |
|
GSKit is an IBM component that is used by WebSphere Voice Response since Fix Pack 8 (Fix level 6.1.0.450). The GSKit that is shipped with WebSphere Voice Response contains multiple security vulnerabilities including the “The RC4 Bar Mitzvah Attack” TLS/SSL client and server vulnerability. WebSphere Voice Response has addressed the applicable CVE. CVE(s): CVE-2015-2808 Affected product(s) and affected version(s): WebSphere Voice Response for AIX V6.1 Refer to the More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_rc4_stream_cipher_affects_websphere_voice_response_for_aix_cve_2015_2808?lang=en_us |
|