Boletines de Vulnerabilidades

IBM Security Bulletin: Vulnerabilities in OpenSSL affects SAN Volume Controller and Storwize Family (CVE-2015-1789 CVE-2015-1791 CVE-2015-1788 )


Información sobre el sistema

   
Software afectado IBM

Descripción

OpenSSL vulnerabilities were disclosed in June 2015 by the OpenSSL Project. OpenSSL is used by SAN Volume Controller and Storwize Family. SAN Volume Controller and Storwize Family has addressed the applicable CVEs. CVE(s): CVE-2015-1789, CVE-2015-1791 and CVE-2015-1788 Affected product(s) and affected version(s): IBM SAN Volume Controller IBM Storwize V7000 IBM Storwize V5000 IBM Storwize V3700 IBM Storwize V3500 All products are affected when running supported releases 1.1 to 7.5

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerabilities_in_openssl_affects_san_volume_controller_and_storwize_family_cve_2015_1789_cve_2015_1791_cve_2015_1788?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2015-1789 ,CVE-2015-1791 ,CVE-2015-1788 ,CVE-2014-8176 ,CVE-2015-1790 ,CVE-2015-1792 ,CVE-2015-4927 ,CVE-2015-1946 and CVE-2015-2808.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2015-10-30

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT