Vulnerability Bulletins |
IBM Security Bulletin: IBM PureData System for Operational Analytics V1.0 (A1791) is affected by vulnerabilities in GSKit (CVE-2015-0138, CVE-2015-0159 and CVE-2014-6221) |
|
| Affected software | IBM |
|
The IBM PureData System for Operational Analytics V1.0 (A1791) ships with IBM DB2 10.1. GSKit is an IBM component that is used by IBM DB2. The GSKit that is shipped with IBM DB2 contains multiple security vulnerabilities including the “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability. IBM DB2 has addressed the applicable CVEs. CVE(s): CVE-2015-0138, CVE-2015-0159 and CVE-2014-6221 Affected product(s) and affected version(s): IBM PureData More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_puredata_system_for_operational_analytics_v1_0_a1791_is_affected_by_vulnerabilities_in_gskit_cve_2015_0138_cve_2015_0159_and_cve_2014_6221?lang=en_us |
|