Vulnerability Bulletins |
IBM Security Bulletin: Vulnerabilities in RC4 stream cipher affects ClearQuest (CVE-2015-2808) |
|
| Affected software | IBM |
|
The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM Rational ClearQuest. CVE(s): CVE-2015-2808 Affected product(s) and affected version(s): IBM Rational ClearQuest, versions 7.1.0.x, 7.1.1.x, 7.1.2.x, 8.0.0.x, 8.0.1.x, in the following components: ClearQuest Eclipse clients that use Report Designer, run remote reports on servers using secure connections, or use the embedded browser to connect to secure web sites. ClearQuest Web Server with SSL enabled Refer to the More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerabilities_in_rc4_stream_cipher_affects_clearquest_cve_2015_2808?lang=en_us |
|