Boletines de Vulnerabilidades

IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM WebSphere MQ Advanced Message Security for IBM i, IBM WebSphere MQ Client for HP-NSS


Información sobre el sistema

   
Software afectado IBM

Descripción

OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. OpenSSL is used by IBM WebSphere MQ Advanced Message Security for the IBM i platform, IBM WebSphere MQ HP-NSS and IBM WebSphere MQ Paho MQTT clients. IBM WebSphere MQ Advanced Message Security for the IBM i platform and IBM WebSphere MQ HP-NSS client have addressed the applicable CVEs. CVE(s): CVE-2015-0209, CVE-2015-0286 and CVE-2015-0289 Affected product(s) and affected version(s): IBM WebSphere MQ

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerabilities_in_openssl_affect_ibm_websphere_mq_advanced_message_security_for_ibm_i_ibm_websphere_mq_client_for_hp_nss?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2015-1884 ,CVE-2014-8730 ,CVE-2015-4000 ,CVE-2014-8917 ,CVE-2015-0209 ,CVE-2015-0286 and CVE-2015-0289.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2015-06-24

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT