Vulnerability Bulletins |
IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM License Metric Tool and IBM Tivoli Asset Discovery for Distributed (April 2015 CPU) |
|
| Affected software | IBM |
|
There are multiple vulnerabilities in IBM SDK Java Technology Edition that is used by IBM License Metric Tool and IBM Tivoli Asset Discovery for Distributed.These issues were disclosed as part of the IBM Java SDK updates in April 2015. This bulletin also addresses FREAK: Factoring Attack on RSA-EXPORT keys SSL/TLS vulnerability and RC4 Bar Mitzvah Attack for SSL/TLS vulnerability. CVE(s): CVE-2015-0488, CVE-2015-0478, CVE-2015-2808, CVE-2015-1916 and CVE-2015-0204 Affected product(s) and More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_ibm_java_sdk_affect_ibm_license_metric_tool_and_ibm_tivoli_asset_discovery_for_distributed_april_2015_cpu?lang=en_us |
|