Vulnerability Bulletins |
IBM Security Bulletin: Vulnerability in RC4 stream cipher affects Tivoli Continuous Data Protection for Files (CVE-2015-2808) |
|
| Affected software | IBM |
|
The RC4 “Bar Mitzvah” Attack for SSL/TLS affects Tivoli Continuous Data Protection for Files (CDP). The CDP client is affected when using WinHttp connections to a remote WebDav backup server. Since the cipher can be negotiated down to RC4 the application is affected. CVE(s): CVE-2015-2808 Affected product(s) and affected version(s): Tivoli Continuous Data Protection for Files version 6.3 and 3.1 are affected. Refer to the following reference URLs for remediation and More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_rc4_stream_cipher_affects_tivoli_continuous_data_protection_for_files_cve_2015_2808?lang=en_us |
|