Vulnerability Bulletins |
IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Cloud Manager with OpenStack (CVE-2015-0486 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469 CVE-2015-0458 CVE-2015-0480 CVE-201 |
|
| Affected software | IBM |
|
There are multiple vulnerabilities in IBM Runtime Environment Java Technology Edition, Version 7 Service Refresh 7 and 7 Service Refresh 8 that are used by IBM Cloud Manager with Openstack. These issues were disclosed as part of the IBM Java SDK updates in April 2015. This bulletin also addresses FREAK: Factoring Attack on RSA-EXPORT keys" SSL/TLS vulnerability and RC4 Bar Mitzvah Attack for SSL/TLS vulnerability. CVE(s): CVE-2015-0486, CVE-2015-0491, CVE-2015-0459, CVE-2015-0469, More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_ibm_java_runtime_affect_ibm_cloud_manager_with_openstack_cve_2015_0486_cve_2015_0491_cve_2015_0459_cve_2015_0469_cve_2015_0458_cve_2015_0480_cve_2 |
|