Vulnerability Bulletins |
IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational RequisitePro |
|
| Affected software | IBM |
|
There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped with IBM WebSphere Application Server, which is needed for the RequisiteWeb component of Rational RequisitePro. These issues were disclosed as part of the IBM Java SDK updates in April 2015. This bulletin also addresses FREAK: Factoring Attack on RSA-EXPORT keys" SSL/TLS vulnerability and RC4 Bar Mitzvah Attack for SSL/TLS vulnerability. CVE(s): CVE-2015-0488, CVE-2015-0478, CVE-2015-0204, More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_ibm_java_sdk_affect_rational_requisitepro1?lang=en_us |
|