IBM Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Spectrum Protect (formerly Tivoli Storage Manager) Client and IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for VMware

OpenSSL vulnerabilities were disclosed on March 27, 2018 by the OpenSSL Project. OpenSSL, used by the IBM Spectrum Protect (formerly Tivoli Storage Manager) Client and IBM Spectrum Protect for Virtual Environments (formerly Tivoli Storage Manager for Virtual Environments): Data Protection for VMware, has addressed the applicable CVEs.

CVE(s): CVE-2018-0733, CVE-2018-0739

Affected product(s) and affected version(s):

These security exposures affect network connections between IBM Spectrum Protect (formerly Tivoli Storage Manager) and VMware services. This exposure affects:

• IBM Spectrum Protect (formerly Tivoli Storage Manager) Client levels:
  – 7.1.0.0 through 7.1.8.3
  – 6.4 and below all levels (6.4 and below are EOS)

  Note that VMware services for the 8.1 client are not affected because the affected component in 8.1 has been moved to Data Protection for VMware.

  • IBM Spectrum Protect for Virtual Environments (formerly Tivoli Storage Manager for Virtual Environments): Data Protection for VMware levels:
    – 8.1.0.0 through 8.1.4.1
    – 7.1.0.0 through 7.1 8.2
    – 6.4 and below all levels (6.4 and below are EOS)

    Refer to the following reference URLs for remediation and additional vulnerability details:
    Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10717409
    X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/140849
    X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/140847

    The post IBM Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Spectrum Protect (formerly Tivoli Storage Manager) Client and IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for VMware appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2IdDJe0