IBM Security Bulletin: IBM API Connect is affected by an OPENSSL vulnerability (CVE-2017-3735)

IBM API Connect Developer Portal has addressed the following vulnerability. OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error while parsing an IPAdressFamily extension in an X.509 certificate. An attacker could exploit this vulnerability to trigger an out-of-bounds read, resulting in an incorrect text display of the certificate.

CVE(s): CVE-2017-3735

Affected product(s) and affected version(s):

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22015811
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/131047

The post IBM Security Bulletin: IBM API Connect is affected by an OPENSSL vulnerability (CVE-2017-3735) appeared first on IBM PSIRT Blog.

Affected API Connect	Affected Versions
IBM API Connect	5.0.8.0-5.0.8.1

from IBM Product Security Incident Response Team https://ift.tt/2L22M4x