Boletines de Vulnerabilidades

IBM Security Bulletin: Vulnerabiltiies in OpenSSL affect IBM SONAS (CVE-2014-3513, CVE-2014-3567, CVE-2014-3568)

   
Software afectado IBM
 
OpenSSL vulnerabilities along with SSL 3 Fallback protection (TLS_FALLBACK_SCSV) were disclosed on October 15, 2014 by the OpenSSL Project. OpenSSL is used by IBM SONAS. IBM SONAS has addressed the applicable CVEs and included the SSL 3.0 Fallback protection (TLS_FALLBACK_SCSV) provided by OpenSSL CVE(s): CVE-2014-3513, CVE-2014-3567 and CVE-2014-3568 Affected product(s) and affected version(s): IBM SONAS, all releases, use OpenSSL that is affected by this vulnerability. Refer to

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerabiltiies_in_openssl_affect_ibm_sonas_cve_2014_3513_cve_2014_3567_cve_2014_3568?lang=en_us