IBM Security Bulletin: IBM Security Access Manager appliances are affected by vulnerabilities in Network Security Services (NSS) (CVE-2016-2834, CVE-2016-5285, CVE-2016-8635)

Vulnerabilities have been identified in the Network Security Services (NSS) libraries. IBM Security Access Manager appliances use NSS and are affected by these vulnerabilities.

CVE(s): CVE-2016-2834, CVE-2016-5285, CVE-2016-8635

Affected product(s) and affected version(s):

IBM Security Access Manager for Web 7.0 appliances, all firmware versions.

IBM Security Access Manager for Web 8.0 appliances, all firmware versions.

IBM Security Access Manager for Mobile 8.0 appliances, all firmware versions.

IBM Security Access Manager 9.0 appliances, all firmware versions.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2miY20D
X-Force Database: http://ift.tt/2j0FfXp
X-Force Database: http://ift.tt/2kdNFaI
X-Force Database: http://ift.tt/2j0ToUD

The post IBM Security Bulletin: IBM Security Access Manager appliances are affected by vulnerabilities in Network Security Services (NSS) (CVE-2016-2834, CVE-2016-5285, CVE-2016-8635) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2lCBvrk