Vulnerability Bulletins |
IBM Security Bulletin: A Vulnerability in OpenSSH and Multiple Vulnerabilities in OpenSSL affect IBM GPFS V3.5 for Windows |
|
| Affected software | IBM |
|
OpenSSH could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied X11 authentication credentials by the sshd server. OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by GPFS V3.5 for Windows. IBM GPFS V3.5 for Windows has addressed the applicable CVEs.CVE(s): CVE-2016-3115, CVE-2016-2107, CVE-2016-2105, CVE-2016-2106, CVE-2016-2109, CVE-2016-2176Affected product(s) and More info: https://www.ibm.com/blogs/psirt/ibm-security-bulletin-a-vulnerability-in-openssh-and-multiple-vulnerabilities-in-openssl-affect-ibm-gpfs-v3-5-for-windows/ |
|