IBM Security Bulletin: CODE BLUE: IBM Java JSSE affected by FREAK for Rational Automation Framework (CVE-2015-0138)
|
Información sobre el sistema
|
|
|
Software afectado |
IBM |
Descripción
|
A vulnerability in various IBM SSL/TLS implementations could allow a remote attacker to downgrade the security of certain SSL/TLS connections. An IBM SSL/TLS client implementation could accept the use of an RSA temporary key in a non-export RSA key exchange ciphersuite. This could allow a remote attacker using man-in-the-middle techniques to facilitate brute-force decryption of TLS/SSL traffic between vulnerable clients and servers. This vulnerability is also known as the FREAK attack.
More info:
https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_code_blue_ibm_java_jsse_affected_by_freak_for_rational_automation_framework_cve_2015_0138?lang=en_us |
Identificadores estándar
|
Propiedad |
Valor |
CVE |
CVE-2015-0138 ,CVE-2014-3600 ,CVE-2014-8110 ,CVE-2015-1472 and CVE-2013-7423. |