Vulnerability Bulletins

IBM Security Bulletin: IBM Security AppScan Enterprise is affected by multiple vulnerabilities


System information

   
Affected software IBM

Description

The Logjam Attack on TLS connections using the Diffie-Hellman (DH) key exchange protocol affects IBM Security AppScan Enterprise. There are multiple vulnerabilities in IBM Runtime Environment Java Technology Edition, Version 7.1 that is used by IBM Security AppScan Enterprise. These issues were disclosed as part of the IBM Java SDK updates in April 2015. OpenSSL vulnerabilities were disclosed by the OpenSSL Project and affect IBM Security AppScan Enterprise. IBM Security AppScan Enterprise has

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_security_appscan_enterprise_is_affected_by_multiple_vulnerabilities?lang=en_us

Standar resources

Property Value
CVE CVE-2015-1788 ,CVE-2015-4000 ,CVE-2015-1793 ,CVE-2015-0488 ,CVE-2015-0478 ,CVE-2015-1916 ,CVE-2015-1789 ,CVE-2015-1790 ,CVE-2015-1791 ,CVE-2015-1792 and CVE-2014-8176.

Version history

Version Comments Date
1.0 Advisory issued 2015-07-29
Ministerio de Defensa
CNI
CCN
CCN-CERT