Vulnerability Bulletins |
IBM Security Bulletin: Vulnerability in RC4 stream cipher affects IBM® SDK for Node.js™ in IBM Bluemix (CVE-2015-2808) |
|
| Affected software | IBM |
|
The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM SDK for Node.js in IBM Bluemix. CVE(s): CVE-2015-2808 Affected product(s) and affected version(s): This vulnerability affects all versions up to and including IBM SDK for Node.js v1.1.0.13 and open-source version v0.10.38 of the Node.js runtime in IBM Bluemix. The issue has been resolved in IBM SDK for Node.js v1.1.0.14 with Node.js Buildpack Version: v1.16-20150409-1839. To check which version of the Node.js runtime your More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_rc4_stream_cipher_affects_ibm_sdk_for_node_js_in_ibm_bluemix_cve_2015_2808?lang=en_us |
|