IBM Security Bulletin: IBM Security Access Manager for Mobile is affected by vulnerabilities in OpenSSH (CVE-2016-3115, CVE-2016-1908)

Vulnerabilities have been identified in OpenSSH. IBM Security Access Manager for Mobile uses OpenSSH and is affected by these vulnerabilities.

CVE(s): CVE-2016-3115, CVE-2016-1908

Affected product(s) and affected version(s):

IBM Security Access Manager for Mobile 8.0, all firmware versions

IBM Security Access Manager 9.0, all firmware versions

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2aQBtgi
X-Force Database: http://ift.tt/1TPZsvb
X-Force Database: http://ift.tt/2b3CeQa

from IBM Product Security Incident Response Team http://ift.tt/2b3ClLi