IBM Security Bulletin: IBM Security Access Manager for Web is affected by vulnerabilities in OpenSSH (CVE-2016-3115, CVE-2016-1908)

Vulnerabilities have been identified in OpenSSH. IBM Security Access Manager for Web uses OpenSSH and is affected by these vulnerabilities.

CVE(s): CVE-2016-3115, CVE-2016-1908

Affected product(s) and affected version(s):

IBM Security Access Manager for Web 7.0 appliances

IBM Security Access Manager for Web 8.0, all firmware versions

IBM Security Access Manager 9.0, all firmware versions

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2b3BZVb
X-Force Database: http://ift.tt/1TPZsvb
X-Force Database: http://ift.tt/2b3CeQa

from IBM Product Security Incident Response Team http://ift.tt/2aQBL6M