OpenSSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. OpenSSL is used by IBM Integrated Management Module (IMM) which has addressed the applicable CVEs. IBM Integrated Management Module (IMM) is not vulnerable to CVE-2016-0800, also known as the DROWN attack.
CVE(s): CVE-2016-0705, CVE-2016-0797, CVE-2016-0798, CVE-2016-0799
Affected product(s) and affected version(s):
| Product | Affected Version |
|---|---|
| IBM Integrated Management Module (IMM) | YUOO |
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1TuyV6G
X-Force Database: http://ift.tt/24FM7sf
X-Force Database: http://ift.tt/24FM6Eo
X-Force Database: http://ift.tt/1LYkGOz
X-Force Database: http://ift.tt/1LYkEGG
from IBM Product Security Incident Response Team http://ift.tt/20vy5Fq
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.