Vulnerability Bulletins

IBM Security Bulletin: Vulnerability in RC4 stream cipher in IBM SDK Java Technology Edition, Versions 1.6 and 1.7 affects IBM SPSS Collaboration and Deployment Services (CVE-2015-2808)

   
Affected software IBM
 
The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM SPSS Collaboration and Deployment Services. CVE(s): CVE-2015-2808 Affected product(s) and affected version(s): SPSS Collaboration and Deployment Services: 4.2.1, 5.0, 6.0, 7.0 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21883440 X-Force Database: http://exchange.xforce.ibmcloud.com/vulnerabilities/101851

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_rc4_stream_cipher_in_ibm_sdk_java_technology_edition_versions_1_6_and_1_7_affects_ibm_spss_collaboration_and_deployment_services_cve_2015_2808?lang=en_us