Boletines de Vulnerabilidades

IBM Security Bulletin: OpenSSL vulnerabilities for Rational Automation Framework Security Advisory (CVE-2015-0204)
Información sobre el sistema

Software afectado	IBM
Descripción
A vulnerability in the OpenSSL ssl3_get_key_exchange function could allow a remote attacker to downgrade the security of certain TLS connections. An OpenSSL client accepts the use of an RSA temporary key in a non-export RSA key exchange ciphersuite. This could allow a remote attacker using man-in-the-middle techniques to facilitate brute-force decryption of TLS/SSL traffic between vulnerable clients and servers. This vulnerability is also known as the FREAK attack. CVE(s): CVE-2015-0204 More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_openssl_vulnerabilities_for_rational_automation_framework_security_advisory_cve_2015_0204?lang=en_us
Identificadores estándar
Propiedad	Valor
CVE	CVE-2015-0204 ,CVE-2014-6593 ,CVE-2015-0138 ,CVE-2015-0410 ,CVE-2014-3569 ,CVE-2014-3570 ,CVE-2014-3571 ,CVE-2014-3572 ,CVE-2014-8275 ,CVE-2015-0205 ,CVE-2015-0206 and CVE-2014-3566.