Vulnerability Bulletins |
Security Bulletin: OpenSSL and TLS vulnerabilities, Logjam (CVE-2015-4000) : Aspera Support |
|
| Affected software | IBM |
|
OpenSSL vulnerabilities were disclosed by the OpenSSL Project and affect the products listed below. This includes the Logjam Attack on TLS connections using the Diffie-Hellman (DH) key exchange protocol (CVE-2015-4000). This also includes the alternate chains certificate forgery vulnerability (CVE-2015-1793). The affected products have addressed the applicable CVEs. TLS connections using the Diffie-Hellman key exchange protocol were found to be vulnerable to a man-in-the-middle type attack. An More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_openssl_and_tls_vulnerabilities_logjam_cve_2015_4000_aspera_support?lang=en_us |
|