Vulnerability Bulletins |
IBM Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos Express. |
|
| Affected software | IBM |
|
There are multiple vulnerabilities in Open Source Apache Tomcat that is used by IBM Cognos Express. Additionally, there are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 that is used by IBM Cognos Express. This bulletin also addresses LOGJAM: The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properly convey a DHE_EXPORT ciphersuite choice. CVE(s): CVE-2015-0227, CVE-2014-0230, More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_security_vulnerabilities_exist_in_ibm_cognos_express?lang=en_us |
|