Boletines de Vulnerabilidades

IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM MQ Light (CVE-2015-0286)


Información sobre el sistema

   
Software afectado IBM

Descripción

OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. OpenSSL is used by IBM MQ Light. IBM MQ Light has addressed the applicable CVEs. CVE(s): CVE-2015-0286 Affected product(s) and affected version(s): The vulnerabilities affect users of the mqlight IBM MQ Light Client Module for Node.js® on all platforms at the following versions: 1.0.2014090800 1.0.2014090801 1.0.2014091000-red 1.0.2014091001 It also affects users of the mqlight-dev IBM MQ Light Client

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerabilities_in_openssl_affect_ibm_mq_light_cve_2015_0286?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2015-0286 ,CVE-2015-0138 and CVE-2015-0159.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2015-04-09

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT