Vulnerability Bulletins |
IBM Security Bulletin: DH key exchange protocol vulnerability (“Logjam”) in IBM Java SDK affects IBM SPSS Statistics (CVE-2015-4000) |
|
| Affected software | IBM |
|
TLS connections using Diffie-Hellman (DH) key exchange protocol, “Logjam” attack, affects IBM Java SDK 1.6, 1.7 that is used by IBM SPSS Statistics. CVE(s): CVE-2015-4000 Affected product(s) and affected version(s): IBM SPSS Statistics 19.0.0.2 IBM SPSS Statistics 20.0.0.2 IBM SPSS Statistics 21.0.0.2 IBM SPSS Statistics 22.0.0.2 IBM SPSS Statistics 23.0.0.0 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_dh_key_exchange_protocol_vulnerability_logjam_in_ibm_java_sdk_affects_ibm_spss_statistics_cve_2015_4000?lang=en_us |
|