Vulnerability Bulletins

IBM Security Bulletin: Multiple vulnerabilities in current releases of IBM® SDK for Node.js™ in IBM Bluemix (CVE-2015-3197, CVE-2016-2086, CVE-2016-2216)

Affected software	IBM

This bulletin describes CVE-2015-3197 that was reported on January 26, 2015 by the OpenSSL Project, plus two additional vulnerabilities. CVE(s): CVE-2015-3197, CVE-2016-2086 and CVE-2016-2216Affected product(s) and affected version(s):These vulnerabilities affect IBM SDK for Node.js v1.1.0.18 and earlier releases. These vulnerabilities affect IBM SDK for Node.js v1.2.0.8 and earlier releases. A subset of these vulnerabilities affect IBM SDK for Node.js v4.2.6.0 and earlier releases. See Refer More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_current_releases_of_ibm_sdk_for_node_js_in_ibm_bluemix_cve_2015_3197_cve_2016_2086_cve_2016_2216?lang=en_us

IBM Security Bulletin: Multiple vulnerabilities in current releases of IBM® SDK for Node.js™ in IBM Bluemix (CVE-2015-3197, CVE-2016-2086, CVE-2016-2216)