Vulnerability Bulletins

IBM Security Bulletin: OpenSSL as used in IBM QRadar SIEM is vulnerable to a Denial of Service attack, and Sensitive Information Exposure. (CVE-2015-3194, CVE-2015-3195, CVE-2015-3196)

Affected software	IBM

OpenSSL vulnerabilities announced 12-3-15 this will also cover Node.js which consumes OpenSSL CVE(s): CVE-2015-3194, CVE-2015-3195, CVE-2015-3196 Affected product(s) and affected version(s): · IBM QRadar SIEM and QRadar Incident Forensics 7.2.n · IBM QRadar SIEM 7.1.n Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21976148 X-Force Database: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_openssl_as_used_in_ibm_qradar_siem_is_vulnerable_to_a_denial_of_service_attack_and_sensitive_information_exposure_cve_2015_3194_cve_2015_3195_cve_2015_3196?lang=en_us

IBM Security Bulletin: OpenSSL as used in IBM QRadar SIEM is vulnerable to a Denial of Service attack, and Sensitive Information Exposure. (CVE-2015-3194, CVE-2015-3195, CVE-2015-3196)