Friday, July 8, 2016

IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru Firmware, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module and QLogic Virtual Fabric Extension Module for IBM BladeCenter

OpenSSL vulnerabilities were disclosed on December 3, 2015 by the OpenSSL Project. IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru Firmware, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module and QLogic Virtual Fabric Extension Module for IBM BladeCenter use OpenSSL and have addressed the applicable CVEs.

CVE(s): CVE-2015-3193, CVE-2015-3194, CVE-2015-3195, CVE-2015-3196, CVE-2015-1794

Affected product(s) and affected version(s):

Product Affected Version
IBM Flex System FC3171 8Gb SAN Switch
IBM Flex System FC3171 8Gb SAN Pass-thru
9.1
QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for
BladeCenter
7.10
QLogic Virtual Fabric Extension Module for IBM BladeCenter 9.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/29n0cSW
X-Force Database: http://ift.tt/1SOfzoa
X-Force Database: http://ift.tt/1Ra8QHG
X-Force Database: http://ift.tt/1SOfxwJ
X-Force Database: http://ift.tt/1Ra8QHI
X-Force Database: http://ift.tt/1Ra8Pn5



from IBM Product Security Incident Response Team http://ift.tt/29n0ARx

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.