Miembros de
Boletines de Vulnerabilidades |
Security Bulletin: IBM System x and Flex Systems Browser Exploit Against SSL/TLS (BEAST) Mitigations (CVE-2011-3389) |
|
| Software afectado | IBM |
|
The SSL 3.0 and TLS 1.0 protocols when used with Cipher Block Chaining (CBC) mode with chained initialization vectors may allow man-in-the-middle attackers to obtain plaintext HTTP headers. CVE(s): CVE-2011-3389 Affected product(s) and affected version(s): Flex System Chassis Management Module, Option part number 68Y7029 Flex System Enterprise Chassis, type 7893, any model Flex System Enterprise Chassis, type 8721, any model Flex System Enterprise Chassis, type 8724, any model Flex More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_system_x_and_flex_systems_browser_exploit_against_ssl_tls_beast_mitigations_cve_2011_3389?lang=en_us |
|
