Vulnerability Bulletins

IBM Security Bulletin: Vulnerability in MD5 Signature and Hash Algorithm affects IBM Domino (CVE-2015-7575)

   
Affected software IBM
 
The MD5 "SLOTH" vulnerability on TLS 1.2 affects IBM Domino. CVE(s): CVE-2015-7575Affected product(s) and affected version(s): IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5. NOTE: Since this vulnerability involves TLS 1.2, neither IBM Domino 9.0 nor IBM Domino 8.5.x are affected. Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21974958X-Force Database:

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_md5_signature_and_hash_algorithm_affects_ibm_domino_cve_2015_7575?lang=en_us